General

  • Target

    svch0st1.exe

  • Size

    144KB

  • Sample

    240511-e2417afh46

  • MD5

    58c52863e349d8f95ad660554d0b724c

  • SHA1

    4cda468531c0fb3d56db05d8ac180dafadd48e33

  • SHA256

    825bfea146d8e72b09912947f27e6d7896750457ff0a598c87ed9fa7a880e15c

  • SHA512

    fd8efeddf22e5e9901577ba9cf66554433e32e68ea4716510217378c3766277a527872c1f4d3a24916709c2469a4895f42f1c7bfd7ffbc50ef651ade1b38dd37

  • SSDEEP

    768:lCmXUnU9UaEDyJHikCBy9XdAYGElJhgYAhs98Br8g37mdmmrm91:kOUU9UeikCByvIYy9

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://coivo2xo.livehost.live:443/bEaT

Targets

    • Target

      svch0st1.exe

    • Size

      144KB

    • MD5

      58c52863e349d8f95ad660554d0b724c

    • SHA1

      4cda468531c0fb3d56db05d8ac180dafadd48e33

    • SHA256

      825bfea146d8e72b09912947f27e6d7896750457ff0a598c87ed9fa7a880e15c

    • SHA512

      fd8efeddf22e5e9901577ba9cf66554433e32e68ea4716510217378c3766277a527872c1f4d3a24916709c2469a4895f42f1c7bfd7ffbc50ef651ade1b38dd37

    • SSDEEP

      768:lCmXUnU9UaEDyJHikCBy9XdAYGElJhgYAhs98Br8g37mdmmrm91:kOUU9UeikCByvIYy9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks