General

  • Target

    8feaab4d4770db9854fcbd7d27f6d46f

  • Size

    500KB

  • Sample

    240204-xqpfgagfd4

  • MD5

    8feaab4d4770db9854fcbd7d27f6d46f

  • SHA1

    acff4cba07bacb123af17f6fb612cba5bf84329f

  • SHA256

    7bb646994e634d271125e25b4c9eb3e9bb4637bb79dd0817b7e83b1027aeb1f4

  • SHA512

    022fbefbf2a0e2b28624893a3eca330479f4faa8e0944b52c260e904ce6bf2ab4cbc00ecf08fc7618f9d49fd36f9b219f4151e1181bcac2f493e3a4e3c0c6060

  • SSDEEP

    12288:n2KlUusmKViNQlYomUIuStqmoD1FQ6BjS/1L4:n1UZUNQCyIuRHDT9IL4

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      8feaab4d4770db9854fcbd7d27f6d46f

    • Size

      500KB

    • MD5

      8feaab4d4770db9854fcbd7d27f6d46f

    • SHA1

      acff4cba07bacb123af17f6fb612cba5bf84329f

    • SHA256

      7bb646994e634d271125e25b4c9eb3e9bb4637bb79dd0817b7e83b1027aeb1f4

    • SHA512

      022fbefbf2a0e2b28624893a3eca330479f4faa8e0944b52c260e904ce6bf2ab4cbc00ecf08fc7618f9d49fd36f9b219f4151e1181bcac2f493e3a4e3c0c6060

    • SSDEEP

      12288:n2KlUusmKViNQlYomUIuStqmoD1FQ6BjS/1L4:n1UZUNQCyIuRHDT9IL4

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks