General

  • Target

    6501bc44b2fe7d86c889f1e9561061ed14796283f7212d77ac5d10a4c46a6ce9.exe

  • Size

    129KB

  • Sample

    241122-jyjcjasrbq

  • MD5

    6712ae0a24299f48a872da645421bcb7

  • SHA1

    53ebbaf02cba1390650e8cd1187e6f26dd95e436

  • SHA256

    6501bc44b2fe7d86c889f1e9561061ed14796283f7212d77ac5d10a4c46a6ce9

  • SHA512

    07b0db03b54f244f5c45394317af4f84cb092a384b1920d3d87101c1499032e10ac587de3ea3a6f173cceca8e18b981dbd441b2f002f9f3f565e7721b4a4ff69

  • SSDEEP

    3072:sz80+C+t9PIrMMRohG7TLV1Wmwj6jtMRvuDKbh:OTmIr1o4PLVMmMJGmbh

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://103.25.196.33:13772/D4qs

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Targets

    • Target

      6501bc44b2fe7d86c889f1e9561061ed14796283f7212d77ac5d10a4c46a6ce9.exe

    • Size

      129KB

    • MD5

      6712ae0a24299f48a872da645421bcb7

    • SHA1

      53ebbaf02cba1390650e8cd1187e6f26dd95e436

    • SHA256

      6501bc44b2fe7d86c889f1e9561061ed14796283f7212d77ac5d10a4c46a6ce9

    • SHA512

      07b0db03b54f244f5c45394317af4f84cb092a384b1920d3d87101c1499032e10ac587de3ea3a6f173cceca8e18b981dbd441b2f002f9f3f565e7721b4a4ff69

    • SSDEEP

      3072:sz80+C+t9PIrMMRohG7TLV1Wmwj6jtMRvuDKbh:OTmIr1o4PLVMmMJGmbh

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks