General

  • Target

    mw3.exe

  • Size

    72KB

  • Sample

    230930-crnv4sga6x

  • MD5

    8d0dc07d79078f68dd32d461c03dd531

  • SHA1

    f9adb080255bedaaf24db4bbbfdcfe3696123947

  • SHA256

    b818cb146de28aef397ad51ef0403713899e0d7376acd2ec5d2d6c9258d7ba6c

  • SHA512

    5c83a5b83754b6864edfbd222241344b88a23aa35e915a73c44dc8d2d2229a3a1edbabdb53aef1b7023cc162b08d7738e7828c3d8d16b4f0992ce901b6fe0c66

  • SSDEEP

    1536:IrJCbSiHr3VNC5EZP/nKABP5QVopkZMb+KR0Nc8QsJq39:lRHr3VNCWN/nKABhQGwe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/exec

Targets

    • Target

      mw3.exe

    • Size

      72KB

    • MD5

      8d0dc07d79078f68dd32d461c03dd531

    • SHA1

      f9adb080255bedaaf24db4bbbfdcfe3696123947

    • SHA256

      b818cb146de28aef397ad51ef0403713899e0d7376acd2ec5d2d6c9258d7ba6c

    • SHA512

      5c83a5b83754b6864edfbd222241344b88a23aa35e915a73c44dc8d2d2229a3a1edbabdb53aef1b7023cc162b08d7738e7828c3d8d16b4f0992ce901b6fe0c66

    • SSDEEP

      1536:IrJCbSiHr3VNC5EZP/nKABP5QVopkZMb+KR0Nc8QsJq39:lRHr3VNCWN/nKABhQGwe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks