metasploit | 4943249281fb11533f068669b0a9f86f4384199e0886c346dcc81c936c90748b | Triage

Sharing

General

Target

4943249281fb11533f068669b0a9f86f4384199e0886c346dcc81c936c90748b
Size

3.1MB
Sample

241116-ndh89avhre
MD5

2b1b58758a89c44f86b69ea8b05eac3a
SHA1

64ca68ae39891b128e73c95c7bdc80b87462bc9c
SHA256

4943249281fb11533f068669b0a9f86f4384199e0886c346dcc81c936c90748b
SHA512

7c92b682ba4a95a7fc9eab068c460fa1984507ae9a45280b91ae3b661b4c8d0e2670189c1241ef35ad131f62ecd0480cb9413d49b73b26dad36d156aef00b354
SSDEEP

49152:pigEuPqOChpkVX9sC/YD17TXPhIM+huoCCJsMiFY//DlMNX:ogEkyyVXwPChv3BiU/h

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  4943249281fb11533f068669b0a9f86f4384199e0886c346dcc81c936c90748b
- Size
  
  3.1MB
- MD5
  
  2b1b58758a89c44f86b69ea8b05eac3a
- SHA1
  
  64ca68ae39891b128e73c95c7bdc80b87462bc9c
- SHA256
  
  4943249281fb11533f068669b0a9f86f4384199e0886c346dcc81c936c90748b
- SHA512
  
  7c92b682ba4a95a7fc9eab068c460fa1984507ae9a45280b91ae3b661b4c8d0e2670189c1241ef35ad131f62ecd0480cb9413d49b73b26dad36d156aef00b354
- SSDEEP
  
  49152:pigEuPqOChpkVX9sC/YD17TXPhIM+huoCCJsMiFY//DlMNX:ogEkyyVXwPChv3BiU/h
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2