General

  • Target

    file.exe

  • Size

    1.9MB

  • Sample

    240123-n4k6jahhfp

  • MD5

    57f791f7477b1f7a1b3605465d054db8

  • SHA1

    bba1bc3ebf07ca3c4e2442f0ba9ea18383ce627b

  • SHA256

    d8b2d883d3b376833fa8e2093e82d0a118ba13b01a2054f8447f57d9fec67030

  • SHA512

    0649ce500c64e8b0ed3e5f60030817b508bf22e96c7608b167c46712f30c3ca952882604fe11ed119018cc997546ee7007d87ecfbd6fcd2811ed679f5f465472

  • SSDEEP

    12288:jsf7THAlXfI+oAGBoD/HpXlXKoemvYQqLWRc0qpb0qD0xc9nQi:AjK6UHpXl6LmvYJLYq2qDF5

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://user.compdatasystems.com:443/clientlibs/contentDoor.ico

Targets

    • Target

      file.exe

    • Size

      1.9MB

    • MD5

      57f791f7477b1f7a1b3605465d054db8

    • SHA1

      bba1bc3ebf07ca3c4e2442f0ba9ea18383ce627b

    • SHA256

      d8b2d883d3b376833fa8e2093e82d0a118ba13b01a2054f8447f57d9fec67030

    • SHA512

      0649ce500c64e8b0ed3e5f60030817b508bf22e96c7608b167c46712f30c3ca952882604fe11ed119018cc997546ee7007d87ecfbd6fcd2811ed679f5f465472

    • SSDEEP

      12288:jsf7THAlXfI+oAGBoD/HpXlXKoemvYQqLWRc0qpb0qD0xc9nQi:AjK6UHpXl6LmvYJLYq2qDF5

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks