General
-
Target
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155
-
Size
83KB
-
Sample
241218-1vqqwatrbn
-
MD5
7e884a5c624f84eb907b43d4518f9fd9
-
SHA1
a93c0597744dc6acd132072ad1ccf11259fd1664
-
SHA256
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155
-
SHA512
dc264281bab9ef3d1c51cc04e9d969ce1990c362fd653ddd4188894d069943fd3a017f5bb94f29bcf910231802b2baf16ae562646471d8572b0da5f3f709b94f
-
SSDEEP
1536:Yj+WqQuctgdgmT1pRFRT0/JDiX9vxgaBtLotjzMLqT+9E/wwkJkT0ioOXCls:k+X8YZPBTgJDwvKavotzMuT+y/wAT0NQ
Static task
static1
Behavioral task
behavioral1
Sample
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155.docm
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155.docm
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
10.10.8.2:55687
Targets
-
-
Target
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155
-
Size
83KB
-
MD5
7e884a5c624f84eb907b43d4518f9fd9
-
SHA1
a93c0597744dc6acd132072ad1ccf11259fd1664
-
SHA256
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155
-
SHA512
dc264281bab9ef3d1c51cc04e9d969ce1990c362fd653ddd4188894d069943fd3a017f5bb94f29bcf910231802b2baf16ae562646471d8572b0da5f3f709b94f
-
SSDEEP
1536:Yj+WqQuctgdgmT1pRFRT0/JDiX9vxgaBtLotjzMLqT+9E/wwkJkT0ioOXCls:k+X8YZPBTgJDwvKavotzMuT+y/wAT0NQ
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-