metasploit | 207c3f038e6b9edaaa3e72eac16ce8d3c37c10e2976c939ec12e25319774da38 | Triage

Sharing

General

Target

207c3f038e6b9edaaa3e72eac16ce8d3c37c10e2976c939ec12e25319774da38
Size

2.8MB
Sample

241125-gbgjba1ney
MD5

1110eafaaa30ca6c3f50e6522b65ea8a
SHA1

8e893be88d99eb7e0cc30c8842b7934ff2816401
SHA256

207c3f038e6b9edaaa3e72eac16ce8d3c37c10e2976c939ec12e25319774da38
SHA512

c331f9f775ea490f195502766b7aa2b418dd8cb5a0150bdda2958e80e63457a27c1520509f7575bc70226d3dfe799d4df6233cc5c4b3c2337c3996b53767ce1f
SSDEEP

49152:ak/qZlHl9hLeDYbSU3CwWiJYD1xEqHCsHjqTVU8SX:t0HGDYHW/HCsDq

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  207c3f038e6b9edaaa3e72eac16ce8d3c37c10e2976c939ec12e25319774da38
- Size
  
  2.8MB
- MD5
  
  1110eafaaa30ca6c3f50e6522b65ea8a
- SHA1
  
  8e893be88d99eb7e0cc30c8842b7934ff2816401
- SHA256
  
  207c3f038e6b9edaaa3e72eac16ce8d3c37c10e2976c939ec12e25319774da38
- SHA512
  
  c331f9f775ea490f195502766b7aa2b418dd8cb5a0150bdda2958e80e63457a27c1520509f7575bc70226d3dfe799d4df6233cc5c4b3c2337c3996b53767ce1f
- SSDEEP
  
  49152:ak/qZlHl9hLeDYbSU3CwWiJYD1xEqHCsHjqTVU8SX:t0HGDYHW/HCsDq
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2