General

  • Target

    8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db

  • Size

    648KB

  • Sample

    240913-2bt5masdlk

  • MD5

    ac4f755722808855003abb5244be8778

  • SHA1

    43c782af8197e16c32548129041735e06bf24b24

  • SHA256

    8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db

  • SHA512

    c8ceff9755699726a40e44b1d9bdbc301c5925d06a800c1e852d6e9638b59cbce04992db8640a9606a11c11d0e3505812315a414d4b7a928dce85aa2a379cca9

  • SSDEEP

    12288:dIOE6dhaTWbx953GSEpup1awv0c3HiIZNDE19Ko9N7rCsVmcoMA:dIBIaTWbp3Glgp7v0CHlNW9Kk/tlR

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.64.134:83/HzGS

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MDDCJS)

Targets

    • Target

      8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db

    • Size

      648KB

    • MD5

      ac4f755722808855003abb5244be8778

    • SHA1

      43c782af8197e16c32548129041735e06bf24b24

    • SHA256

      8bf91d26e737b56aa4771761d591f405b5c04c6fd8f12e90e5b9ff9b580054db

    • SHA512

      c8ceff9755699726a40e44b1d9bdbc301c5925d06a800c1e852d6e9638b59cbce04992db8640a9606a11c11d0e3505812315a414d4b7a928dce85aa2a379cca9

    • SSDEEP

      12288:dIOE6dhaTWbx953GSEpup1awv0c3HiIZNDE19Ko9N7rCsVmcoMA:dIBIaTWbp3Glgp7v0CHlNW9Kk/tlR

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks