General

  • Target

    testD.dll

  • Size

    184KB

  • Sample

    210302-gmp63pxn9n

  • MD5

    b6a5560470b4d30933bec6035d8def65

  • SHA1

    184350e6a6b8225a7eac1755b74ffe1454ecca4a

  • SHA256

    029b5c9057c5a75dd5822ac06e98ea9f6d046a362437399a64b539cbd33fa4f9

  • SHA512

    85c435b981cfc1726b008c5c30436610064bc5037585b331ba62679fc6c48b1f0a0999f9b6b2cd0e0645d2a5beef9b37c787b556612e97fbb80c0d56ce5d2d87

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://fussion1.com:443/files/templates.jpg

Targets

    • Target

      testD.dll

    • Size

      184KB

    • MD5

      b6a5560470b4d30933bec6035d8def65

    • SHA1

      184350e6a6b8225a7eac1755b74ffe1454ecca4a

    • SHA256

      029b5c9057c5a75dd5822ac06e98ea9f6d046a362437399a64b539cbd33fa4f9

    • SHA512

      85c435b981cfc1726b008c5c30436610064bc5037585b331ba62679fc6c48b1f0a0999f9b6b2cd0e0645d2a5beef9b37c787b556612e97fbb80c0d56ce5d2d87

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks