General
- Target rs4444.exe
- Size 72KB
- Sample260622-v31cdsez4w
- SHA256 33e6c3d32feb6c42fbd2340c2b2746f1f6245cd1520482f11b293e7b0dd1f6a2
- MD5 7e89e3e09e875d1b5298e8a945c67384
- SHA1 00aff1202433f160b440ff96c8ff351054073571
- SHA512 ef54a9b9afaeadfbeb1b65c141368ab49865b5999937941346b8d11609c4832e3fc945c09370ce29c6b272685d5ee8d8e2eab5ae9ec2fb64648318fcfcc0875a
- SSDEEP 1536:I6HMCPEeFfWGSjBdIC14dpTPsMTYBMb+KR0Nc8QsJq39:hHOeF52BdIpTPspBe0Nc8QsC9
- TLSH T10C73AE42D4C45425D162227E27B53AB59A71F4B73205C2CA768CCDF6DFD1CB0A27A3C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
rs4444.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
rs4444.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
10.0.2.15:4444
Targets
-
- Target rs4444.exe
- Size 72KB
- SHA256 33e6c3d32feb6c42fbd2340c2b2746f1f6245cd1520482f11b293e7b0dd1f6a2
- MD5 7e89e3e09e875d1b5298e8a945c67384
- SHA1 00aff1202433f160b440ff96c8ff351054073571
- SHA512 ef54a9b9afaeadfbeb1b65c141368ab49865b5999937941346b8d11609c4832e3fc945c09370ce29c6b272685d5ee8d8e2eab5ae9ec2fb64648318fcfcc0875a
- SSDEEP 1536:I6HMCPEeFfWGSjBdIC14dpTPsMTYBMb+KR0Nc8QsJq39:hHOeF52BdIpTPspBe0Nc8QsC9
- TLSH T10C73AE42D4C45425D162227E27B53AB59A71F4B73205C2CA768CCDF6DFD1CB0A27A3C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.