General

  • Target

    27817e88053ac9d3210b40b1f335be92a6875192fbc1324490808cf57c881a2e

  • Size

    227KB

  • Sample

    220524-1qgx6sdbdr

  • MD5

    9c3f06667f1b3fcd5370cf0c2e179f98

  • SHA1

    6161ef3b9f20a97fa049ec2129f880b73e6a52c2

  • SHA256

    27817e88053ac9d3210b40b1f335be92a6875192fbc1324490808cf57c881a2e

  • SHA512

    4d0137150518ae6d78ffbc678e01c179411693e65c10e4c4200ba54eee8395b2d1b5d543fe552edc00fd2ff83d3e4c014e2657ba1a07fa74c2e4b017b4a123be

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://96.31.77.62:9999/hoDA

Targets

    • Target

      27817e88053ac9d3210b40b1f335be92a6875192fbc1324490808cf57c881a2e

    • Size

      227KB

    • MD5

      9c3f06667f1b3fcd5370cf0c2e179f98

    • SHA1

      6161ef3b9f20a97fa049ec2129f880b73e6a52c2

    • SHA256

      27817e88053ac9d3210b40b1f335be92a6875192fbc1324490808cf57c881a2e

    • SHA512

      4d0137150518ae6d78ffbc678e01c179411693e65c10e4c4200ba54eee8395b2d1b5d543fe552edc00fd2ff83d3e4c014e2657ba1a07fa74c2e4b017b4a123be

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks