General
- Target 04fa8c47323d6fec418f42eae227b6a278b5e9e28b5b537da48c631da4381f7d
- Size 7KB
- Sample260701-tvycdsh12l
- SHA256 04fa8c47323d6fec418f42eae227b6a278b5e9e28b5b537da48c631da4381f7d
- MD5 99a453c050775db9d7a16deb4c55cc45
- SHA1 57f6b684abdcc993e523f972543d96fbb9ee6ad7
- SHA512 1e3f8741eb23ceb751b93171f30559a6a063f11dea7b4fc0cd973aa46a2abb58a9a49ac44474044232aeffb2018def56a524803a5662e4b1a5aa274b3bf92400
- SSDEEP 24:eFGSG9wSHUIabMy58XZh9h9ClfAhudsIAJKf44up+:iG+SxfyeXZh9hMluudsJ54b
- TLSH T172E123A7A2369CF6F7392B7C46439BC660FC773442D34B0D0A64048A5192A19B8E5F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
04fa8c47323d6fec418f42eae227b6a278b5e9e28b5b537da48c631da4381f7d.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
04fa8c47323d6fec418f42eae227b6a278b5e9e28b5b537da48c631da4381f7d.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.79.131:8888
Targets
-
- Target 04fa8c47323d6fec418f42eae227b6a278b5e9e28b5b537da48c631da4381f7d
- Size 7KB
- SHA256 04fa8c47323d6fec418f42eae227b6a278b5e9e28b5b537da48c631da4381f7d
- MD5 99a453c050775db9d7a16deb4c55cc45
- SHA1 57f6b684abdcc993e523f972543d96fbb9ee6ad7
- SHA512 1e3f8741eb23ceb751b93171f30559a6a063f11dea7b4fc0cd973aa46a2abb58a9a49ac44474044232aeffb2018def56a524803a5662e4b1a5aa274b3bf92400
- SSDEEP 24:eFGSG9wSHUIabMy58XZh9h9ClfAhudsIAJKf44up+:iG+SxfyeXZh9hMluudsJ54b
- TLSH T172E123A7A2369CF6F7392B7C46439BC660FC773442D34B0D0A64048A5192A19B8E5F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.