General
- Target rvv.exe
- Size 72KB
- Sample260825-sj2d8sthla
- SHA256 c075445734ac3eadd83125377ac3f95d06d411ae84820a7ce7f3c86f771ff21f
- MD5 bcbe947e0cf3691abf2f719420205998
- SHA1 faa9752086fec1424f92139c4c5f547650874ec3
- SHA512 4357d531c153c61ead82770634928754d1af9880237c3224a2b4d9b2689eb3aa888bb4f7831af1f4c1738db1c363b2f1958f9aa8c547ce2405bc8fbcdafbff52
- SSDEEP 1536:ICPatRbI6Z7qX2v9iBGJzyXjIiJyMb+KR0Nc8QsJq39:InM6xqZUcjI8ye0Nc8QsC9
- TLSH T1C773B042E6C05421D1B2127E27753A766971F4F97202C1AE3A8CDDE9EBD1CB0D2663CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
rvv.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
rvv.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
178.132.4.148:37338
Targets
-
- Target rvv.exe
- Size 72KB
- SHA256 c075445734ac3eadd83125377ac3f95d06d411ae84820a7ce7f3c86f771ff21f
- MD5 bcbe947e0cf3691abf2f719420205998
- SHA1 faa9752086fec1424f92139c4c5f547650874ec3
- SHA512 4357d531c153c61ead82770634928754d1af9880237c3224a2b4d9b2689eb3aa888bb4f7831af1f4c1738db1c363b2f1958f9aa8c547ce2405bc8fbcdafbff52
- SSDEEP 1536:ICPatRbI6Z7qX2v9iBGJzyXjIiJyMb+KR0Nc8QsJq39:InM6xqZUcjI8ye0Nc8QsC9
- TLSH T1C773B042E6C05421D1B2127E27753A766971F4F97202C1AE3A8CDDE9EBD1CB0D2663CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.