General

  • Target

    3b90d9fad35a45a738c6b2830896168c99014474de17984411be61b25acf6db5

  • Size

    814KB

  • Sample

    210504-mql1j4vyqs

  • MD5

    c925822c6d5175c30ba96388b07e9e16

  • SHA1

    dd10c4c9a71b5850c23fde513525cac86943523e

  • SHA256

    3b90d9fad35a45a738c6b2830896168c99014474de17984411be61b25acf6db5

  • SHA512

    754f9cd80df7f78bbc1ea1bf0b4bfddcff815702649c8227defa62308cee96e5db1c526739a2caf4b50e784f60d131e49b078ba94cd1c0656f44d08efd02ec53

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://157.230.184.142:443/ST/TWGRYKf0/d/du92w/RUk/Z2l.htm

Targets

    • Target

      3b90d9fad35a45a738c6b2830896168c99014474de17984411be61b25acf6db5

    • Size

      814KB

    • MD5

      c925822c6d5175c30ba96388b07e9e16

    • SHA1

      dd10c4c9a71b5850c23fde513525cac86943523e

    • SHA256

      3b90d9fad35a45a738c6b2830896168c99014474de17984411be61b25acf6db5

    • SHA512

      754f9cd80df7f78bbc1ea1bf0b4bfddcff815702649c8227defa62308cee96e5db1c526739a2caf4b50e784f60d131e49b078ba94cd1c0656f44d08efd02ec53

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks