General
- Target 7dfdb686f3212b13d09f18d47fde7eb84a9c05428346a11263d9983d8b1bc68f
- Size 7KB
- Sample260814-rdatnavgme
- SHA256 7dfdb686f3212b13d09f18d47fde7eb84a9c05428346a11263d9983d8b1bc68f
- MD5 b9004a4e6c9f52d30db2c9428197df81
- SHA1 3dc822a824d6541838e3247a91b5744d2162e497
- SHA512 2650dcee00898e6b8f5a9e73e45e1a989b1a02c4a778b2aa006114faf49840fe4d3260a49b27fd1c0f8a5891985222ca0bc5066516ec80b4f7711bd42e49990d
- SSDEEP 24:eFGSG9wMmcsMyy8XZh9h9ClfA5zilRVcmU6Sy0TxSTnBgC4vSdY/HtHd3p+:iG+Mmc1yHXZh9hMlOOlm6gVMj+I
- TLSH T1EAF178C3F32664F3E73D0AFD42C3DA86A07CBB7195A24A490B5994052981D6AF4A4FC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
7dfdb686f3212b13d09f18d47fde7eb84a9c05428346a11263d9983d8b1bc68f.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7dfdb686f3212b13d09f18d47fde7eb84a9c05428346a11263d9983d8b1bc68f.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.1.20:4444
Targets
-
- Target 7dfdb686f3212b13d09f18d47fde7eb84a9c05428346a11263d9983d8b1bc68f
- Size 7KB
- SHA256 7dfdb686f3212b13d09f18d47fde7eb84a9c05428346a11263d9983d8b1bc68f
- MD5 b9004a4e6c9f52d30db2c9428197df81
- SHA1 3dc822a824d6541838e3247a91b5744d2162e497
- SHA512 2650dcee00898e6b8f5a9e73e45e1a989b1a02c4a778b2aa006114faf49840fe4d3260a49b27fd1c0f8a5891985222ca0bc5066516ec80b4f7711bd42e49990d
- SSDEEP 24:eFGSG9wMmcsMyy8XZh9h9ClfA5zilRVcmU6Sy0TxSTnBgC4vSdY/HtHd3p+:iG+Mmc1yHXZh9hMlOOlm6gVMj+I
- TLSH T1EAF178C3F32664F3E73D0AFD42C3DA86A07CBB7195A24A490B5994052981D6AF4A4FC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.