General

  • Target

    e699c2c2575ee61035f6638932f703a92885023f33fbbbbd28b6237a475922dd

  • Size

    6KB

  • Sample

    220521-m9x7lsdcg8

  • MD5

    6b03fcc80a58d52aa980bcdb49496e44

  • SHA1

    edba9a8ad5bce2cd591773b3fba92c1715a2e44d

  • SHA256

    e699c2c2575ee61035f6638932f703a92885023f33fbbbbd28b6237a475922dd

  • SHA512

    f84bd0cf2cafc3d8ed93317031b450ccfcbda36aa5aa206a38a7377b5015afa12a26893cf63c74586d3d6ff4de27f39ffa227314fc5d442459f73657619fe9ac

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://certificates.updatecenter.icu:443/v11/5/windowsupdate/redir/v6-win86-wuredir.cab?id=14425600235201

Targets

    • Target

      e699c2c2575ee61035f6638932f703a92885023f33fbbbbd28b6237a475922dd

    • Size

      6KB

    • MD5

      6b03fcc80a58d52aa980bcdb49496e44

    • SHA1

      edba9a8ad5bce2cd591773b3fba92c1715a2e44d

    • SHA256

      e699c2c2575ee61035f6638932f703a92885023f33fbbbbd28b6237a475922dd

    • SHA512

      f84bd0cf2cafc3d8ed93317031b450ccfcbda36aa5aa206a38a7377b5015afa12a26893cf63c74586d3d6ff4de27f39ffa227314fc5d442459f73657619fe9ac

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks