General
- Target 9cc9c94c88c2c57524f33be7eb1066fc7ea938979ed98dadbc33fc226135ba27
- Size 1.6MB
- Sample260720-fdkhbahy4v
- SHA256 9cc9c94c88c2c57524f33be7eb1066fc7ea938979ed98dadbc33fc226135ba27
- MD5 d64512e3b78df95a309bb8b7126f23ee
- SHA1 d6f0efb8785c9bf3e4efd9f36cc17b58f3245ff4
- SHA512 ba01e342b87f5ac6c3a940ca9bcc453be64be7ba56420f643adb7da555ede156eedb332c40ff0c02d3d3338047ee7c13a56b3435f3134473e5febf9a5beb7c5e
- SSDEEP 49152:eOavQKlTbj+6dxyKUKtZGRXv2q/artRqoaaHSDw:e1VqC/HtG
- TLSH T11275BE17B29610EDC06EC17887565122FA71BC850B34BAEF17A467262E22FD06F3DF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
9cc9c94c88c2c57524f33be7eb1066fc7ea938979ed98dadbc33fc226135ba27.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9cc9c94c88c2c57524f33be7eb1066fc7ea938979ed98dadbc33fc226135ba27.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.66.2:4444
Targets
-
- Target 9cc9c94c88c2c57524f33be7eb1066fc7ea938979ed98dadbc33fc226135ba27
- Size 1.6MB
- SHA256 9cc9c94c88c2c57524f33be7eb1066fc7ea938979ed98dadbc33fc226135ba27
- MD5 d64512e3b78df95a309bb8b7126f23ee
- SHA1 d6f0efb8785c9bf3e4efd9f36cc17b58f3245ff4
- SHA512 ba01e342b87f5ac6c3a940ca9bcc453be64be7ba56420f643adb7da555ede156eedb332c40ff0c02d3d3338047ee7c13a56b3435f3134473e5febf9a5beb7c5e
- SSDEEP 49152:eOavQKlTbj+6dxyKUKtZGRXv2q/artRqoaaHSDw:e1VqC/HtG
- TLSH T11275BE17B29610EDC06EC17887565122FA71BC850B34BAEF17A467262E22FD06F3DF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.