General
-
Target
72485f44dff5047d00d7f575e6f8f2e531ddc2fb9cc0fab7e2cc828901951523
-
Size
14KB
-
Sample
241214-2qlf2awqe1
-
MD5
7902bd974f87e82fddbbefe361b76f86
-
SHA1
91d7a5e1db69d92e7e5b49dca6446d182a5e98d6
-
SHA256
72485f44dff5047d00d7f575e6f8f2e531ddc2fb9cc0fab7e2cc828901951523
-
SHA512
ebdc686bf1b7c7ac4d42fa898a2164cfa2f93814bc2cd8663859682f2dcd5ff4cce9a411dd4bb8e93831c4a01c2938982bb0fb79913251f5f754b1ebdfd2c85a
-
SSDEEP
192:r3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOvQtOZw7UQsddBPf:SMCfrfQ6tBSIStO/fdBPf
Static task
static1
Behavioral task
behavioral1
Sample
72485f44dff5047d00d7f575e6f8f2e531ddc2fb9cc0fab7e2cc828901951523.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
72485f44dff5047d00d7f575e6f8f2e531ddc2fb9cc0fab7e2cc828901951523.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/download_exec
http://47.236.37.45:50065/Z4bl
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)
Targets
-
-
Target
72485f44dff5047d00d7f575e6f8f2e531ddc2fb9cc0fab7e2cc828901951523
-
Size
14KB
-
MD5
7902bd974f87e82fddbbefe361b76f86
-
SHA1
91d7a5e1db69d92e7e5b49dca6446d182a5e98d6
-
SHA256
72485f44dff5047d00d7f575e6f8f2e531ddc2fb9cc0fab7e2cc828901951523
-
SHA512
ebdc686bf1b7c7ac4d42fa898a2164cfa2f93814bc2cd8663859682f2dcd5ff4cce9a411dd4bb8e93831c4a01c2938982bb0fb79913251f5f754b1ebdfd2c85a
-
SSDEEP
192:r3mbPYCfMcrfOIuZmvKQxtzlSIVX6NOvQtOZw7UQsddBPf:SMCfrfQ6tBSIStO/fdBPf
Score10/10-
Cobaltstrike family
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-