metasploit | 474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c | Triage

Sharing

General

Target

474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c
Size

2.1MB
Sample

241128-j1k9xa1mhw
MD5

4dfc8be7a5ac8b09c90e61ecac64e48c
SHA1

730cbec0208067c38dd1e121f0e4d7030005a3d6
SHA256

474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c
SHA512

de1b9bc367fe11b70ffde55a7be65cc3db54a6ef2347044fff1e39f01126f8572b538d9e2d0a70a19a66d54459c0729ccc407fb9fa61486bf829b5b6d6cc992a
SSDEEP

24576:6VgJvPmvYJJcNRWD5GmrdXuonigABiHJwD7SMP5eJZ8bOpcNMzCxwVxCeVTuCv6g:1g4hglTgPzUWxCcYD1m7UW

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes

headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Targets

- Target
  
  474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c
- Size
  
  2.1MB
- MD5
  
  4dfc8be7a5ac8b09c90e61ecac64e48c
- SHA1
  
  730cbec0208067c38dd1e121f0e4d7030005a3d6
- SHA256
  
  474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c
- SHA512
  
  de1b9bc367fe11b70ffde55a7be65cc3db54a6ef2347044fff1e39f01126f8572b538d9e2d0a70a19a66d54459c0729ccc407fb9fa61486bf829b5b6d6cc992a
- SSDEEP
  
  24576:6VgJvPmvYJJcNRWD5GmrdXuonigABiHJwD7SMP5eJZ8bOpcNMzCxwVxCeVTuCv6g:1g4hglTgPzUWxCcYD1m7UW
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2