metasploit | ed0c55493696f500e9f386bc26fc6b3c15648af3abebe52c682167e45e7962eb | Triage

Sharing

General

Target

ed0c55493696f500e9f386bc26fc6b3c15648af3abebe52c682167e45e7962eb
Size

2.8MB
Sample

241115-pfx1vstfmd
MD5

9dd3ebc726e79c6e46e76367b120ddcd
SHA1

5e294893f08aeb92dcb9b513a5389e4bae452bf7
SHA256

ed0c55493696f500e9f386bc26fc6b3c15648af3abebe52c682167e45e7962eb
SHA512

da752e5e7ef8cab1473267f621863f8adf922ad3fd3f81656bc9969409c63493383ff930319634ca8889be7637f04142b953a05147ba60be9219fecaf2c90733
SSDEEP

49152:1k/qZlHl9hLeDYmmUjCeWivYD1QbkQHCsVgWv5Qn5Qwc6VU8eX:W0HGDYcWQHCsVZv5Q5Q

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  ed0c55493696f500e9f386bc26fc6b3c15648af3abebe52c682167e45e7962eb
- Size
  
  2.8MB
- MD5
  
  9dd3ebc726e79c6e46e76367b120ddcd
- SHA1
  
  5e294893f08aeb92dcb9b513a5389e4bae452bf7
- SHA256
  
  ed0c55493696f500e9f386bc26fc6b3c15648af3abebe52c682167e45e7962eb
- SHA512
  
  da752e5e7ef8cab1473267f621863f8adf922ad3fd3f81656bc9969409c63493383ff930319634ca8889be7637f04142b953a05147ba60be9219fecaf2c90733
- SSDEEP
  
  49152:1k/qZlHl9hLeDYmmUjCeWivYD1QbkQHCsVgWv5Qn5Qwc6VU8eX:W0HGDYcWQHCsVZv5Q5Q
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2