metasploit | c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52 | Triage

Sharing

General

Target

c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52N.exe
Size

3.1MB
Sample

241123-dvp31stjfk
MD5

e10ef14b275bedf0f965dbb42c2171a0
SHA1

bafc677262a3cb5eff678d4584baa43afa252217
SHA256

c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52
SHA512

c24bea2ce3843eba8baf32f770434a8a2c450306dc8161f298103d5a946855dda7febc6cd8dd599b7a39b24466fe81434017fd8568fefeed6e36cd25b82a69fb
SSDEEP

49152:P2Ppun36K995p9oHnaWCXYD1QTyhtpf/kLZQdBk1e2VQBwX:OPp+36CHoHw2htN/hdB8e2

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52N.exe
- Size
  
  3.1MB
- MD5
  
  e10ef14b275bedf0f965dbb42c2171a0
- SHA1
  
  bafc677262a3cb5eff678d4584baa43afa252217
- SHA256
  
  c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52
- SHA512
  
  c24bea2ce3843eba8baf32f770434a8a2c450306dc8161f298103d5a946855dda7febc6cd8dd599b7a39b24466fe81434017fd8568fefeed6e36cd25b82a69fb
- SSDEEP
  
  49152:P2Ppun36K995p9oHnaWCXYD1QTyhtpf/kLZQdBk1e2VQBwX:OPp+36CHoHw2htN/hdB8e2
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2