metasploit | a3e43ee4db4ba5a087a3bf6d1553c228a8b99102bce40c98666ae2310c2818f0 | Triage

Sharing

General

Target

a3e43ee4db4ba5a087a3bf6d1553c228a8b99102bce40c98666ae2310c2818f0
Size

2.8MB
Sample

241117-k79frawgmc
MD5

9c456fa28681ab9856d2268357f8ba60
SHA1

4151335587ce208b61e52110290f39b4d5805786
SHA256

a3e43ee4db4ba5a087a3bf6d1553c228a8b99102bce40c98666ae2310c2818f0
SHA512

5b9f2b5f675704212eec3450a90fd45f0680f600c5a8fb306c2d6c389d923fac64135d6a60ce3edce3c3705e41fa270ce6f5daacc314ba0cbae411c3fa6a239f
SSDEEP

49152:6k/qZlHl9hLeDYFSU3CtWioYD1hShHCsnPGAV202DVU8dX:N0HGDYYWdHCsPGAV

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  a3e43ee4db4ba5a087a3bf6d1553c228a8b99102bce40c98666ae2310c2818f0
- Size
  
  2.8MB
- MD5
  
  9c456fa28681ab9856d2268357f8ba60
- SHA1
  
  4151335587ce208b61e52110290f39b4d5805786
- SHA256
  
  a3e43ee4db4ba5a087a3bf6d1553c228a8b99102bce40c98666ae2310c2818f0
- SHA512
  
  5b9f2b5f675704212eec3450a90fd45f0680f600c5a8fb306c2d6c389d923fac64135d6a60ce3edce3c3705e41fa270ce6f5daacc314ba0cbae411c3fa6a239f
- SSDEEP
  
  49152:6k/qZlHl9hLeDYFSU3CtWioYD1hShHCsnPGAV202DVU8dX:N0HGDYYWdHCsPGAV
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2