General

  • Target

    bb9e514a09715b3c0f8afde18a74d88e618eb4eea8b4d3031882032e423954e2

  • Size

    69KB

  • Sample

    240511-e85ajagc97

  • MD5

    3c92e36dbf5ff1a5a4754da11b932306

  • SHA1

    1385e804ab96adad64c8bb6f777db0b158611f61

  • SHA256

    bb9e514a09715b3c0f8afde18a74d88e618eb4eea8b4d3031882032e423954e2

  • SHA512

    bddefd556e0c8fc8bed4f284a89e4c2f65b6f194e20725c137407f20f73f4f6cac52906a94ab33068857692d7d8ebbf660c42bf6539b48c8012bc781b29211d3

  • SSDEEP

    768:ZIcdcQY/sQskPu+58oskuJmbYhEEuO5bQlUtNK/WuKhzCna5yPS:Z6K8SosBJVbQ+yk5yP

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://arress.windowshostnamehost.club:8585/kF2y

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Targets

    • Target

      bb9e514a09715b3c0f8afde18a74d88e618eb4eea8b4d3031882032e423954e2

    • Size

      69KB

    • MD5

      3c92e36dbf5ff1a5a4754da11b932306

    • SHA1

      1385e804ab96adad64c8bb6f777db0b158611f61

    • SHA256

      bb9e514a09715b3c0f8afde18a74d88e618eb4eea8b4d3031882032e423954e2

    • SHA512

      bddefd556e0c8fc8bed4f284a89e4c2f65b6f194e20725c137407f20f73f4f6cac52906a94ab33068857692d7d8ebbf660c42bf6539b48c8012bc781b29211d3

    • SSDEEP

      768:ZIcdcQY/sQskPu+58oskuJmbYhEEuO5bQlUtNK/WuKhzCna5yPS:Z6K8SosBJVbQ+yk5yP

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks