General
-
Target
b94672c719959fa3d5d4072ccf8719198ae72104bb4fe4b6537143ad78c10db4.exe
-
Size
72KB
-
Sample
241210-lfx43sxlen
-
MD5
f5108cf4eba30d8565bc689f83ddd715
-
SHA1
cc9f8b3705c9f6aa5a75cf104305dd7a095873ae
-
SHA256
b94672c719959fa3d5d4072ccf8719198ae72104bb4fe4b6537143ad78c10db4
-
SHA512
b8d57ac612fe201507c7f47010e114edb5e490d5d0151f2dfa77416041774e8abe90bde82f9d7a17df08ea126eead87244b4753d7fed37b480418308e91987fa
-
SSDEEP
1536:IMcP8KyKwsw3mOsDWeNQ+cm2DMb+KR0Nc8QsJq3F:RB8wbWHDDW+cbDe0Nc8QsCF
Behavioral task
behavioral1
Sample
b94672c719959fa3d5d4072ccf8719198ae72104bb4fe4b6537143ad78c10db4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b94672c719959fa3d5d4072ccf8719198ae72104bb4fe4b6537143ad78c10db4.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/reverse_http
http://10.10.10.10:443/f0sxg4Hb5uSmsqezweKsEQxdDLUIRcbh_9hjXKascf1GRS980y4MzMejfQ6IrPWOCJhnLjcfVKm7JDWlkbjTdK3fGFPi4p37164Z3K28XaGuNJWz9wkfw1TyV--4Z98aMJpLlwx1Zbc2jECtbx51qcjeFsgfODZknNPVyAJMRCeX4D4s9UYokS5-ZZI977KQ9P
Targets
-
-
Target
b94672c719959fa3d5d4072ccf8719198ae72104bb4fe4b6537143ad78c10db4.exe
-
Size
72KB
-
MD5
f5108cf4eba30d8565bc689f83ddd715
-
SHA1
cc9f8b3705c9f6aa5a75cf104305dd7a095873ae
-
SHA256
b94672c719959fa3d5d4072ccf8719198ae72104bb4fe4b6537143ad78c10db4
-
SHA512
b8d57ac612fe201507c7f47010e114edb5e490d5d0151f2dfa77416041774e8abe90bde82f9d7a17df08ea126eead87244b4753d7fed37b480418308e91987fa
-
SSDEEP
1536:IMcP8KyKwsw3mOsDWeNQ+cm2DMb+KR0Nc8QsJq3F:RB8wbWHDDW+cbDe0Nc8QsCF
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-