User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

General

  • Target

    artifact_x86.exe

  • Size

    14KB

  • Sample

    240608-wfqp4sea3t

  • MD5

    e0299831a208f6e1f77a717ddb9f0235

  • SHA1

    145bd5480772b63120c6f1cb701d29a36b89778d

  • SHA256

    316caf607cac5fb305b585863bc510a6140dfe6d3b87533aeeacfcf4f2e0e010

  • SHA512

    d5d626f128b6f0825dbe868ffb5852bcd163f0fa097f6a25b4c25adc6171a8f66f6fc784dd5502dbb28a37dad557c37b2c83178ee48cead6ec5d0f441720910e

  • SSDEEP

    192:13mbPYCfMcrfOIuZmvKQxtzlSIVX6NO/Owt7fejDMN1:UMCfrfQ6tBSItOwNeUN1

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://120.46.208.63:80/b2oY

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; InfoPath.2)

Targets

    • Target

      artifact_x86.exe

    • Size

      14KB

    • MD5

      e0299831a208f6e1f77a717ddb9f0235

    • SHA1

      145bd5480772b63120c6f1cb701d29a36b89778d

    • SHA256

      316caf607cac5fb305b585863bc510a6140dfe6d3b87533aeeacfcf4f2e0e010

    • SHA512

      d5d626f128b6f0825dbe868ffb5852bcd163f0fa097f6a25b4c25adc6171a8f66f6fc784dd5502dbb28a37dad557c37b2c83178ee48cead6ec5d0f441720910e

    • SSDEEP

      192:13mbPYCfMcrfOIuZmvKQxtzlSIVX6NO/Owt7fejDMN1:UMCfrfQ6tBSItOwNeUN1

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks