General

  • Target

    1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74

  • Size

    945KB

  • Sample

    240923-sl7c9szbqj

  • MD5

    4d15cf9a32195f50ceaa748fe9aec1f7

  • SHA1

    9dd7d387a8cc244263b7c573b23f7fbef706dedd

  • SHA256

    1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74

  • SHA512

    d1902004d23489ab8b6413db00595a42f09fff3b42f8470c63cae243d65ef59f6c492119d88c6142a9b8651420fb2613b49038a6c57b2978dfe7897687de1cec

  • SSDEEP

    12288:VqX9PxG0OKdVlU6eR8tuzWwZ1Vlra4KN0m7VqDbvZ9XU9flfwt:EX9BOK5U6eR8bwZXlSN0kqDr

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.195.127:4444/OYBr

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Targets

    • Target

      1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74

    • Size

      945KB

    • MD5

      4d15cf9a32195f50ceaa748fe9aec1f7

    • SHA1

      9dd7d387a8cc244263b7c573b23f7fbef706dedd

    • SHA256

      1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74

    • SHA512

      d1902004d23489ab8b6413db00595a42f09fff3b42f8470c63cae243d65ef59f6c492119d88c6142a9b8651420fb2613b49038a6c57b2978dfe7897687de1cec

    • SSDEEP

      12288:VqX9PxG0OKdVlU6eR8tuzWwZ1Vlra4KN0m7VqDbvZ9XU9flfwt:EX9BOK5U6eR8bwZXlSN0kqDr

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks