General

  • Target

    b9b8a0f4d78315c436c9d6b6699952fe

  • Size

    400KB

  • Sample

    240307-1h113sef73

  • MD5

    b9b8a0f4d78315c436c9d6b6699952fe

  • SHA1

    eb01d19aba86beed4e5ecf88bb7b1565531efa07

  • SHA256

    32e4d84e634fd4d7c979f0008fe32c21a0713eed09caba58e85dca3bb9e772dc

  • SHA512

    ea8ace598443ebccc21fb0e30aff121604ccb28d4bda9e7dd44a2c5d92bfd61467520b75a427a7d79aefcc6d492b04bf6fc1a45b5f3f80583bf3437c87990814

  • SSDEEP

    6144:4u5g79cOY/LnJCPEQ42F+40HG5W2s4ugIueUQjiEzMtm6187Un:4u5g79cV/QELG+40HG504nIuRQjizRn

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      b9b8a0f4d78315c436c9d6b6699952fe

    • Size

      400KB

    • MD5

      b9b8a0f4d78315c436c9d6b6699952fe

    • SHA1

      eb01d19aba86beed4e5ecf88bb7b1565531efa07

    • SHA256

      32e4d84e634fd4d7c979f0008fe32c21a0713eed09caba58e85dca3bb9e772dc

    • SHA512

      ea8ace598443ebccc21fb0e30aff121604ccb28d4bda9e7dd44a2c5d92bfd61467520b75a427a7d79aefcc6d492b04bf6fc1a45b5f3f80583bf3437c87990814

    • SSDEEP

      6144:4u5g79cOY/LnJCPEQ42F+40HG5W2s4ugIueUQjiEzMtm6187Un:4u5g79cV/QELG+40HG504nIuRQjizRn

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks