General

  • Target

    4772c058861a05be7a7fd654931e3c25

  • Size

    374KB

  • Sample

    240106-3hr5aaacdl

  • MD5

    4772c058861a05be7a7fd654931e3c25

  • SHA1

    edf463fe1512dc7509203f519a4afcfb475088db

  • SHA256

    82ecbaa97f176fc0115ac32d7a7c4cfee4585bc84eb21cd6848a0d01248b2779

  • SHA512

    79179f20d97eb2ba40c3806cf93ad5d70ffcbb18209b4ec21a8d374abf627244c54ef73f0814b605dfd8bb02061645a2d8853df1915bc7c2b2a5672723c7da40

  • SSDEEP

    6144:lDWHN0BEEbZX0Jz8RPR1iL/CW3e0dZfFgCZTdsmnElxEI8y8t7mJHbQ6rpMzgZYK:ciZX0JzSPRa1dTdxGmnOxH8TlaQww8tp

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      4772c058861a05be7a7fd654931e3c25

    • Size

      374KB

    • MD5

      4772c058861a05be7a7fd654931e3c25

    • SHA1

      edf463fe1512dc7509203f519a4afcfb475088db

    • SHA256

      82ecbaa97f176fc0115ac32d7a7c4cfee4585bc84eb21cd6848a0d01248b2779

    • SHA512

      79179f20d97eb2ba40c3806cf93ad5d70ffcbb18209b4ec21a8d374abf627244c54ef73f0814b605dfd8bb02061645a2d8853df1915bc7c2b2a5672723c7da40

    • SSDEEP

      6144:lDWHN0BEEbZX0Jz8RPR1iL/CW3e0dZfFgCZTdsmnElxEI8y8t7mJHbQ6rpMzgZYK:ciZX0JzSPRa1dTdxGmnOxH8TlaQww8tp

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks