General

  • Target

    6f313414261cfe97829e961f7c693735

  • Size

    172KB

  • Sample

    240122-kcgggscef3

  • MD5

    6f313414261cfe97829e961f7c693735

  • SHA1

    6a5e54aeeb27f8c0ef960bb7975e4884c4853ab8

  • SHA256

    b5912ec679e46ddcaf14b16e2e0dad68971d0413a9335014f015b61ce75c4538

  • SHA512

    5dcf17c7c98e497ba30f8093f5cd8be350a2cc465c8e83f46c5edd695d404e7861fa85f4e84244cb1836387e5fb166afdb0b778c206e8a7be9291e82bc975161

  • SSDEEP

    3072:BrkSCebEmjjuq6gCyDwSVSMSF61DW/TUdbiX5Bt7LxPmBqGwvwkjmarQ6nSMLBuR:1o6jjH3CyDw3MSF2uUa53JmBtwvwf09s

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      6f313414261cfe97829e961f7c693735

    • Size

      172KB

    • MD5

      6f313414261cfe97829e961f7c693735

    • SHA1

      6a5e54aeeb27f8c0ef960bb7975e4884c4853ab8

    • SHA256

      b5912ec679e46ddcaf14b16e2e0dad68971d0413a9335014f015b61ce75c4538

    • SHA512

      5dcf17c7c98e497ba30f8093f5cd8be350a2cc465c8e83f46c5edd695d404e7861fa85f4e84244cb1836387e5fb166afdb0b778c206e8a7be9291e82bc975161

    • SSDEEP

      3072:BrkSCebEmjjuq6gCyDwSVSMSF61DW/TUdbiX5Bt7LxPmBqGwvwkjmarQ6nSMLBuR:1o6jjH3CyDw3MSF2uUa53JmBtwvwf09s

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks