General

  • Target

    mw2.exe

  • Size

    72KB

  • Sample

    231010-2dspksff6z

  • MD5

    56b15ab58477bd660bad4708938d8987

  • SHA1

    cd0b1b72b51f4985cca3ca9ea82c22a59d9cc9ed

  • SHA256

    c36580036412cc938d9ecc1ce4747d61b9038a7e5e77447158d5aa134fed23bb

  • SHA512

    bf0250851173e6d99c14813dc9c9a2f352913dd00249e485dc5bc78aafec026f385e19cdb692816269e33d8cd4ea96b80e9c91a06e4569e4dfeaa80bd1bb256a

  • SSDEEP

    1536:ITysmp4pXaM33K+eHPBoo1bcN/+5Wq6NMb+KR0Nc8QsJq39:Gysm2XaTv6YYN+R6Ne0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/exec

Targets

    • Target

      mw2.exe

    • Size

      72KB

    • MD5

      56b15ab58477bd660bad4708938d8987

    • SHA1

      cd0b1b72b51f4985cca3ca9ea82c22a59d9cc9ed

    • SHA256

      c36580036412cc938d9ecc1ce4747d61b9038a7e5e77447158d5aa134fed23bb

    • SHA512

      bf0250851173e6d99c14813dc9c9a2f352913dd00249e485dc5bc78aafec026f385e19cdb692816269e33d8cd4ea96b80e9c91a06e4569e4dfeaa80bd1bb256a

    • SSDEEP

      1536:ITysmp4pXaM33K+eHPBoo1bcN/+5Wq6NMb+KR0Nc8QsJq39:Gysm2XaTv6YYN+R6Ne0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks