General

  • Target

    59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004.docm

  • Size

    83KB

  • Sample

    241220-ew6b3azpen

  • MD5

    e9e6f32925c8fb28a3834e4a4575d566

  • SHA1

    7b220d821d5cc32cf8a9fa105985b1bb550029b5

  • SHA256

    59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004

  • SHA512

    acbbb209b5b94781dd9600a7c20476d0b39d5bbb9fb1806aee68f2264d8725f03fc9427683db88862d3d7d81bd53fa47f88f4be579b66a966fcc0ea6f618db20

  • SSDEEP

    1536:+o+WqQuctgdRm+yapjClC3H5wCVG3OrH65/7VUs0ngCjuYbgGvtioOXClI:R+X8YfHtC2HV4O7eTv0ngCjuBGvtFOC2

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.9.2.178:8888

Targets

    • Target

      59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004.docm

    • Size

      83KB

    • MD5

      e9e6f32925c8fb28a3834e4a4575d566

    • SHA1

      7b220d821d5cc32cf8a9fa105985b1bb550029b5

    • SHA256

      59657f4537018aa3621450282e9a973895e33e6f236f4f644769a505c498c004

    • SHA512

      acbbb209b5b94781dd9600a7c20476d0b39d5bbb9fb1806aee68f2264d8725f03fc9427683db88862d3d7d81bd53fa47f88f4be579b66a966fcc0ea6f618db20

    • SSDEEP

      1536:+o+WqQuctgdRm+yapjClC3H5wCVG3OrH65/7VUs0ngCjuYbgGvtioOXClI:R+X8YfHtC2HV4O7eTv0ngCjuBGvtFOC2

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks