metasploit | 4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4 | Triage

Sharing

General

Target

4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4
Size

9KB
Sample

241217-22txjssrem
MD5

55ca95b290499cfeb755afb787d4f90e
SHA1

589ca556a2a9b8c415de7e269e4607a10a9b0e5e
SHA256

4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4
SHA512

589a3c15f0024ac6511f7fec5c6e1f4dfe12fc4a9609bd09da29dc26db5e879835fcace332e2b6454862677503a435679df14ff7ac8a470c9f11707ea41c63bb
SSDEEP

192:2sDfhSuEE+rOGSBfUjWJz5jOsO1I1IgAkloCQM:24SOGSBZJz5jyyAkmC

Score

10^/10

metasploit discovery

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.68.165:5200/IIdf

Attributes

headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Targets

- Target
  
  4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4
- Size
  
  9KB
- MD5
  
  55ca95b290499cfeb755afb787d4f90e
- SHA1
  
  589ca556a2a9b8c415de7e269e4607a10a9b0e5e
- SHA256
  
  4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4
- SHA512
  
  589a3c15f0024ac6511f7fec5c6e1f4dfe12fc4a9609bd09da29dc26db5e879835fcace332e2b6454862677503a435679df14ff7ac8a470c9f11707ea41c63bb
- SSDEEP
  
  192:2sDfhSuEE+rOGSBfUjWJz5jOsO1I1IgAkloCQM:24SOGSBZJz5jyyAkmC
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2