metasploit | f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0 | Triage

Sharing

General

Target

f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0
Size

2.1MB
Sample

241119-n89ppa1jcr
MD5

0964283038a7b02d242da43b69754b72
SHA1

6da278a4148d2eec0d114547f5b1be314cfc50bb
SHA256

f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0
SHA512

9e229898d9e5919d5ac6cd604727b50b8001273e1f853c5e448a66dd97a99fc2a941a6bb8ef785f7f746444a261905ef597e9f575554800ba56b99767a221aaf
SSDEEP

24576:XTIrvPWMVDcNRpEs36a3iZYz8PChSOLDIVJwKP3R4PCV9c0o9UjAP7CnVTJCvnO7:bF3haC67LZo9UjM7CrYD1LiK3

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0
- Size
  
  2.1MB
- MD5
  
  0964283038a7b02d242da43b69754b72
- SHA1
  
  6da278a4148d2eec0d114547f5b1be314cfc50bb
- SHA256
  
  f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0
- SHA512
  
  9e229898d9e5919d5ac6cd604727b50b8001273e1f853c5e448a66dd97a99fc2a941a6bb8ef785f7f746444a261905ef597e9f575554800ba56b99767a221aaf
- SSDEEP
  
  24576:XTIrvPWMVDcNRpEs36a3iZYz8PChSOLDIVJwKP3R4PCV9c0o9UjAP7CnVTJCvnO7:bF3haC67LZo9UjM7CrYD1LiK3
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2