General

  • Target

    bfe832dd29e58d5688614981f21252bc2860a387a11368ee25037a1f2da617a8

  • Size

    42KB

  • Sample

    241115-hpj22azmay

  • MD5

    5525330f29a4711edc4f8d4734400979

  • SHA1

    1e85f380c826f869264775f6a638ca9533f8770e

  • SHA256

    bfe832dd29e58d5688614981f21252bc2860a387a11368ee25037a1f2da617a8

  • SHA512

    dcd7861dee9a78b077e3b0222f350f843fea992fc7faf944833f452d80a0f061e8bc398331bf23fe72d9c9a72ad13aff0bff3146242c5f0099095c52e121b569

  • SSDEEP

    384:rKPSlHuSvzpFoqV55pdM1upCfGzEyno8YhWi0wPh0gSXKEBuD2pre:rKPSugpFrDPMsTqhWqhFSXBBuDCr

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://106.15.120.243:8879/dAvA

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Targets

    • Target

      bfe832dd29e58d5688614981f21252bc2860a387a11368ee25037a1f2da617a8

    • Size

      42KB

    • MD5

      5525330f29a4711edc4f8d4734400979

    • SHA1

      1e85f380c826f869264775f6a638ca9533f8770e

    • SHA256

      bfe832dd29e58d5688614981f21252bc2860a387a11368ee25037a1f2da617a8

    • SHA512

      dcd7861dee9a78b077e3b0222f350f843fea992fc7faf944833f452d80a0f061e8bc398331bf23fe72d9c9a72ad13aff0bff3146242c5f0099095c52e121b569

    • SSDEEP

      384:rKPSlHuSvzpFoqV55pdM1upCfGzEyno8YhWi0wPh0gSXKEBuD2pre:rKPSugpFrDPMsTqhWqhFSXBBuDCr

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks