General

  • Target

    2a06c8270ed48822a28b657d37c1bb4e6d161f22e3f0ab7ea34c97a9554f5405

  • Size

    44KB

  • Sample

    220508-2wycsacgep

  • MD5

    532c9a9212b4a3db36ebb5d45ab40b63

  • SHA1

    11fbfb640c681c03619db57e66daaae7cad6a6a2

  • SHA256

    2a06c8270ed48822a28b657d37c1bb4e6d161f22e3f0ab7ea34c97a9554f5405

  • SHA512

    26659ea1ddc2ff48ffc095d5ad72b4bd031f3ac68797ef6b49a7c2d78c53de904a83f56bdbd2dc24a781c4115e9fe34ffe677579b60d5ce29b61ec2a8feb46f7

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.65:4444

Targets

    • Target

      2a06c8270ed48822a28b657d37c1bb4e6d161f22e3f0ab7ea34c97a9554f5405

    • Size

      44KB

    • MD5

      532c9a9212b4a3db36ebb5d45ab40b63

    • SHA1

      11fbfb640c681c03619db57e66daaae7cad6a6a2

    • SHA256

      2a06c8270ed48822a28b657d37c1bb4e6d161f22e3f0ab7ea34c97a9554f5405

    • SHA512

      26659ea1ddc2ff48ffc095d5ad72b4bd031f3ac68797ef6b49a7c2d78c53de904a83f56bdbd2dc24a781c4115e9fe34ffe677579b60d5ce29b61ec2a8feb46f7

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks