General
- Target 093a10f0994c117a535d13183ea1003a211b81ba22e1f8c8e184b5059795b1ce
- Size 116KB
- Sample260720-mptzfse15p
- SHA256 093a10f0994c117a535d13183ea1003a211b81ba22e1f8c8e184b5059795b1ce
- MD5 ab90f4bdb632856daf08ad3e9a178153
- SHA1 bc47eecf04ba24061e82db7c308d40dc922a27b7
- SHA512 916520706798da8de698482c268a5c6a2b08d14fc46433eeb4cf6259277eb2d98e547568215d76928c010c3a18c34b5d371df678158490531b12f512f6c83dac
- SSDEEP 1536:klUgk+aG0sU5y3sgoVFLeWHx99OnuDJKO00XnjAEA5HJzOc1Mb9ZYPwPIGR:klO9G0E0VjDUbB0R
- TLSH T1F5C308C5BAC59DE7CA19063584FB832D2338F7C51BC28B034D3476351E276E0AE8B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
093a10f0994c117a535d13183ea1003a211b81ba22e1f8c8e184b5059795b1ce.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
093a10f0994c117a535d13183ea1003a211b81ba22e1f8c8e184b5059795b1ce.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.66.2:4444
Targets
-
- Target 093a10f0994c117a535d13183ea1003a211b81ba22e1f8c8e184b5059795b1ce
- Size 116KB
- SHA256 093a10f0994c117a535d13183ea1003a211b81ba22e1f8c8e184b5059795b1ce
- MD5 ab90f4bdb632856daf08ad3e9a178153
- SHA1 bc47eecf04ba24061e82db7c308d40dc922a27b7
- SHA512 916520706798da8de698482c268a5c6a2b08d14fc46433eeb4cf6259277eb2d98e547568215d76928c010c3a18c34b5d371df678158490531b12f512f6c83dac
- SSDEEP 1536:klUgk+aG0sU5y3sgoVFLeWHx99OnuDJKO00XnjAEA5HJzOc1Mb9ZYPwPIGR:klO9G0E0VjDUbB0R
- TLSH T1F5C308C5BAC59DE7CA19063584FB832D2338F7C51BC28B034D3476351E276E0AE8B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.