General
- Target fe6566056c06899ffef3eae232bc1884bf59c263434b9c64d76af182053f3509
- Size 429KB
- Sample261102-cxtnjsgx5q
- SHA256 fe6566056c06899ffef3eae232bc1884bf59c263434b9c64d76af182053f3509
- MD5 03c81ce46087909b48bb284d99ce66f5
- SHA1 a8ac218345b5402e2e9b4f3b42e22121cc1421fd
- SHA512 777a8a86c059aa8e69ca556303d1bab122279708190b3d863daf7c0d72c000ac10982054201c4764032b01838d7bb66ed97cafbeafcb1b5d36f0b63648895189
- SSDEEP 6144:wd2EgBKCNMs027V1cza9df99EA634ZNcFtBADUYWqwe/JQPFyH7225hArIh8xOua:DqyX0wRQH9+bNU88b8TD8AobYBb
- TLSH T1C6948444CEE00066D971743ADBBFD030DAA2B091B29A8F324D55A70509DDD67EBC39BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fe6566056c06899ffef3eae232bc1884bf59c263434b9c64d76af182053f3509.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fe6566056c06899ffef3eae232bc1884bf59c263434b9c64d76af182053f3509.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.1.53:4444
Targets
-
- Target fe6566056c06899ffef3eae232bc1884bf59c263434b9c64d76af182053f3509
- Size 429KB
- SHA256 fe6566056c06899ffef3eae232bc1884bf59c263434b9c64d76af182053f3509
- MD5 03c81ce46087909b48bb284d99ce66f5
- SHA1 a8ac218345b5402e2e9b4f3b42e22121cc1421fd
- SHA512 777a8a86c059aa8e69ca556303d1bab122279708190b3d863daf7c0d72c000ac10982054201c4764032b01838d7bb66ed97cafbeafcb1b5d36f0b63648895189
- SSDEEP 6144:wd2EgBKCNMs027V1cza9df99EA634ZNcFtBADUYWqwe/JQPFyH7225hArIh8xOua:DqyX0wRQH9+bNU88b8TD8AobYBb
- TLSH T1C6948444CEE00066D971743ADBBFD030DAA2B091B29A8F324D55A70509DDD67EBC39BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.