General
- Target hgm.exe
- Size 7KB
- Sample260425-ptnpcact8k
- SHA256 118c32d05d482cd72561c853e2e5257d5cf886295b98887ee67426a285066423
- MD5 7737d1e3861fa93498c8128805063fce
- SHA1 ccd178ca009e6cc1bdfa3c9dfe6402ab25765f3e
- SHA512 42bb6edb2eaa10c1c1f2da3111759f5f34a24ffb6deba9c537a8592ec1bb44125b46374b4e4f041fd7c074b84b220f498e136eb0d3eb1c75ed7d12203c7ef14b
- SSDEEP 24:eFGSG9wSpUIVbMy58XZh9h9ClfAhaifIAJc4up+:iG+oxVQyeXZh9hMluJJc4b
- TLSH T153E100A762365CF7F6392BBD41439BC661FC773457E3064D0A68084A5092919B8B5F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
hgm.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
hgm.exe
Resource
win10ltsc2021-20260130-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.101.39:4444
Targets
-
- Target hgm.exe
- Size 7KB
- SHA256 118c32d05d482cd72561c853e2e5257d5cf886295b98887ee67426a285066423
- MD5 7737d1e3861fa93498c8128805063fce
- SHA1 ccd178ca009e6cc1bdfa3c9dfe6402ab25765f3e
- SHA512 42bb6edb2eaa10c1c1f2da3111759f5f34a24ffb6deba9c537a8592ec1bb44125b46374b4e4f041fd7c074b84b220f498e136eb0d3eb1c75ed7d12203c7ef14b
- SSDEEP 24:eFGSG9wSpUIVbMy58XZh9h9ClfAhaifIAJc4up+:iG+oxVQyeXZh9hMluJJc4b
- TLSH T153E100A762365CF7F6392BBD41439BC661FC773457E3064D0A68084A5092919B8B5F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.