General

  • Target

    933103426dfb1fd1e455573b0334fa3e2e626cc9aeb14692b8e297bc39507339N

  • Size

    72KB

  • Sample

    240920-wdlndayfrf

  • MD5

    999d5e45fcc598672abad6d5c7dce850

  • SHA1

    be486b40fa91fe182fcf2e041087ecc16b8b54e5

  • SHA256

    933103426dfb1fd1e455573b0334fa3e2e626cc9aeb14692b8e297bc39507339

  • SHA512

    26a79cf64bdec87dd6eecabf2b671eb51f5c1d3e734d77c536f3631d76667bace83b4330a0e15708e51a7f392d583d4f28ca2cf3c299dabe478218e4dc593da6

  • SSDEEP

    1536:IK/yNDIKUmoUIVIj6TwUnoMb+KR0Nc8QsJq39:RyDIkFGUUnoe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      933103426dfb1fd1e455573b0334fa3e2e626cc9aeb14692b8e297bc39507339N

    • Size

      72KB

    • MD5

      999d5e45fcc598672abad6d5c7dce850

    • SHA1

      be486b40fa91fe182fcf2e041087ecc16b8b54e5

    • SHA256

      933103426dfb1fd1e455573b0334fa3e2e626cc9aeb14692b8e297bc39507339

    • SHA512

      26a79cf64bdec87dd6eecabf2b671eb51f5c1d3e734d77c536f3631d76667bace83b4330a0e15708e51a7f392d583d4f28ca2cf3c299dabe478218e4dc593da6

    • SSDEEP

      1536:IK/yNDIKUmoUIVIj6TwUnoMb+KR0Nc8QsJq39:RyDIkFGUUnoe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks