General
-
Target
painfulwashere.exe
-
Size
72KB
-
Sample
241210-2yadqstlhw
-
MD5
42d918009da2dfb89e84420d689c5ecc
-
SHA1
022e9d934063c7c6d22b04d059cadfee32c58b62
-
SHA256
7ac1a2e149ca2862478bb901cec0200358682fa1f161ebb5f95001b17c26565b
-
SHA512
0418a72e37ff2d13e4928b5ffe079cd02120b79ddb6bc7618af4e6c0771cb34542bbbc68b97e1d0c40a4b984b8669b5c551494fd2485e2c5e46570df14883173
-
SSDEEP
1536:IRcXx4/2IH5Tlx6+9QXpMb+KR0Nc8QsJq39:3kTDtQ5e0Nc8QsC9
Behavioral task
behavioral1
Sample
painfulwashere.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
painfulwashere.exe
Resource
win7-20241010-en
Behavioral task
behavioral3
Sample
painfulwashere.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
painfulwashere.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral5
Sample
painfulwashere.exe
Resource
win11-20241007-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
192.168.100.19:1177
Targets
-
-
Target
painfulwashere.exe
-
Size
72KB
-
MD5
42d918009da2dfb89e84420d689c5ecc
-
SHA1
022e9d934063c7c6d22b04d059cadfee32c58b62
-
SHA256
7ac1a2e149ca2862478bb901cec0200358682fa1f161ebb5f95001b17c26565b
-
SHA512
0418a72e37ff2d13e4928b5ffe079cd02120b79ddb6bc7618af4e6c0771cb34542bbbc68b97e1d0c40a4b984b8669b5c551494fd2485e2c5e46570df14883173
-
SSDEEP
1536:IRcXx4/2IH5Tlx6+9QXpMb+KR0Nc8QsJq39:3kTDtQ5e0Nc8QsC9
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-