General

  • Target

    ConsoleApplication1.exe

  • Size

    217KB

  • Sample

    220801-phdp1ahcej

  • MD5

    025dbff7c94ef9e64423d54b6d05dbce

  • SHA1

    e07830227a0dcb6b0c7a13296b998df7e52f4223

  • SHA256

    cde0bfdfaa2a53c3a39c4f4776b5167cf7273315be468cf22294780a3a568831

  • SHA512

    bff01dd6e3a8f08c6b9b72f766867dbda87a36612cdeca963fd9063a02c680d65b3c84ebd0a54edebc1bd01b6452b686ce27eedcc647f84e881bcb5ca84d8dd4

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://service-2ct860nd-1312989509.sh.apigw.tencentcs.com:443/vue.min.js

Targets

    • Target

      ConsoleApplication1.exe

    • Size

      217KB

    • MD5

      025dbff7c94ef9e64423d54b6d05dbce

    • SHA1

      e07830227a0dcb6b0c7a13296b998df7e52f4223

    • SHA256

      cde0bfdfaa2a53c3a39c4f4776b5167cf7273315be468cf22294780a3a568831

    • SHA512

      bff01dd6e3a8f08c6b9b72f766867dbda87a36612cdeca963fd9063a02c680d65b3c84ebd0a54edebc1bd01b6452b686ce27eedcc647f84e881bcb5ca84d8dd4

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks