General
- Target 8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
- Size 48KB
- Sample260720-rnx2yacy3q
- SHA256 8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
- MD5 97ed576ffb17a318c21c4852f325f5d9
- SHA1 93c8f16e42eaccd89cf683d885ea9a267f27e20f
- SHA512 20354368f3c27084aa2d1eb293bcb839934cbf5fe20289638123fa208afcf5723568c6b73a94125ef67d1110693f1375983927629199931fc0a44531c55ad602
- SSDEEP 768:ZyuRXvFNPrciT8BFbhFIWjB/fCPmiEKaX2xFFz+PB2ZwuLekQ7Xp7Ex:wET18BFj9tzZjXm+Zkwu/657i
- TLSH T1CD231986FA4340E0E61724F04DDB97BFCA32FB128411D6B9FF4DAB5AF532B51A40520A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_http
C2
-
http://192.168.66.2:4444/KGQDBe7xhn7iu-O6iOX-9Asu-1pFVURvc1nJxnbZcEjG3vKk2zupeVZ3M88XUWHcc5jgs-COFDvJum2GW7ARxM3WNhhiBIgUe8DsCIhZj4I58v14HEDwqlg3IcPggtNGTJB-YlfNR9VsVL6ffCXp--hDMABXmFut6eidJcPWDeRwh4VdqVKPHQl_YZY2091xgFSEpfSnVj_FLWRTNUnTtPuL8H19thYrVYUjOA1EPESvsg8z
Targets
-
- Target 8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
- Size 48KB
- SHA256 8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
- MD5 97ed576ffb17a318c21c4852f325f5d9
- SHA1 93c8f16e42eaccd89cf683d885ea9a267f27e20f
- SHA512 20354368f3c27084aa2d1eb293bcb839934cbf5fe20289638123fa208afcf5723568c6b73a94125ef67d1110693f1375983927629199931fc0a44531c55ad602
- SSDEEP 768:ZyuRXvFNPrciT8BFbhFIWjB/fCPmiEKaX2xFFz+PB2ZwuLekQ7Xp7Ex:wET18BFj9tzZjXm+Zkwu/657i
- TLSH T1CD231986FA4340E0E61724F04DDB97BFCA32FB128411D6B9FF4DAB5AF532B51A40520A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.