General
- Target keepass.exe
- Size 72KB
- Sample260614-js11dsdv4k
- SHA256 6e4f8de7277b78686fe389e6d1df2b24f5bc3564208b76c8af5d1319073d1b2e
- MD5 e17408ba8828d05c74a63d0a3b5525b7
- SHA1 5ce98e43d7e6d33409a0305ca4c797ab759365d8
- SHA512 a5a26791f58553332ea914678dce3b3d8e3c9c433046855b2a33edf45addbed635f016832cec649d331856a9d9f086688fb51dc2a78e043ce9fa569985612abe
- SSDEEP 1536:IgStBNaelZB2AFNOpgop9YPqECg6Ht7t6DdMb+KR0Nc8QsJq39:lStaelr24cN7mq9Ht7Ade0Nc8QsC9
- TLSH T1D573C002E9C41415D172223E27B53E75A971F5BA3642C1DB368CCDF8DBD1970A22A78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
keepass.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
keepass.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
66.214.2.5:443
Targets
-
- Target keepass.exe
- Size 72KB
- SHA256 6e4f8de7277b78686fe389e6d1df2b24f5bc3564208b76c8af5d1319073d1b2e
- MD5 e17408ba8828d05c74a63d0a3b5525b7
- SHA1 5ce98e43d7e6d33409a0305ca4c797ab759365d8
- SHA512 a5a26791f58553332ea914678dce3b3d8e3c9c433046855b2a33edf45addbed635f016832cec649d331856a9d9f086688fb51dc2a78e043ce9fa569985612abe
- SSDEEP 1536:IgStBNaelZB2AFNOpgop9YPqECg6Ht7t6DdMb+KR0Nc8QsJq39:lStaelr24cN7mq9Ht7Ade0Nc8QsC9
- TLSH T1D573C002E9C41415D172223E27B53E75A971F5BA3642C1DB368CCDF8DBD1970A22A78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.