General
- Target 6fb5d81a40f92dd3bc7e7774cf1bbc9db3e305c209fe7d4b428701b3d2cad35e
- Size 7KB
- Sample260814-rdladsac24
- SHA256 6fb5d81a40f92dd3bc7e7774cf1bbc9db3e305c209fe7d4b428701b3d2cad35e
- MD5 f8ffd23f2c3b12b699d01c6cd6cbda3e
- SHA1 88dc8189dae6284a95549b69928321f7b929394d
- SHA512 b0ccd31a1aabace76267624a8ac8c1371fb914906cf0af5aec177c36d2cba9ec890ef837a7f23692c692a7f77d7b76b2f458782a3c5ab8e31538f1d9d26ee532
- SSDEEP 24:eFGSG9wS5UITMy58XZh9h9ClfAh+YTIAJj4up+:iG+kxoyeXZh9hMlu+YTJj4b
- TLSH T1C6E123A362369CF7F73D2BBD81439B8661FD737442D30B0D0A64085641A2918B8E5F93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
6fb5d81a40f92dd3bc7e7774cf1bbc9db3e305c209fe7d4b428701b3d2cad35e.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6fb5d81a40f92dd3bc7e7774cf1bbc9db3e305c209fe7d4b428701b3d2cad35e.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.1.20:4444
Targets
-
- Target 6fb5d81a40f92dd3bc7e7774cf1bbc9db3e305c209fe7d4b428701b3d2cad35e
- Size 7KB
- SHA256 6fb5d81a40f92dd3bc7e7774cf1bbc9db3e305c209fe7d4b428701b3d2cad35e
- MD5 f8ffd23f2c3b12b699d01c6cd6cbda3e
- SHA1 88dc8189dae6284a95549b69928321f7b929394d
- SHA512 b0ccd31a1aabace76267624a8ac8c1371fb914906cf0af5aec177c36d2cba9ec890ef837a7f23692c692a7f77d7b76b2f458782a3c5ab8e31538f1d9d26ee532
- SSDEEP 24:eFGSG9wS5UITMy58XZh9h9ClfAh+YTIAJj4up+:iG+kxoyeXZh9hMlu+YTJj4b
- TLSH T1C6E123A362369CF7F73D2BBD81439B8661FD737442D30B0D0A64085641A2918B8E5F93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.