General
-
Target
59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004.docm
-
Size
83KB
-
Sample
241220-e22k3azrbj
-
MD5
e9e6f32925c8fb28a3834e4a4575d566
-
SHA1
7b220d821d5cc32cf8a9fa105985b1bb550029b5
-
SHA256
59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004
-
SHA512
acbbb209b5b94781dd9600a7c20476d0b39d5bbb9fb1806aee68f2264d8725f03fc9427683db88862d3d7d81bd53fa47f88f4be579b66a966fcc0ea6f618db20
-
SSDEEP
1536:+o+WqQuctgdRm+yapjClC3H5wCVG3OrH65/7VUs0ngCjuYbgGvtioOXClI:R+X8YfHtC2HV4O7eTv0ngCjuBGvtFOC2
Static task
static1
Behavioral task
behavioral1
Sample
59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004.docm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004.docm
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
10.9.2.178:8888
Targets
-
-
Target
59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004.docm
-
Size
83KB
-
MD5
e9e6f32925c8fb28a3834e4a4575d566
-
SHA1
7b220d821d5cc32cf8a9fa105985b1bb550029b5
-
SHA256
59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004
-
SHA512
acbbb209b5b94781dd9600a7c20476d0b39d5bbb9fb1806aee68f2264d8725f03fc9427683db88862d3d7d81bd53fa47f88f4be579b66a966fcc0ea6f618db20
-
SSDEEP
1536:+o+WqQuctgdRm+yapjClC3H5wCVG3OrH65/7VUs0ngCjuYbgGvtioOXClI:R+X8YfHtC2HV4O7eTv0ngCjuBGvtFOC2
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-