General

  • Target

    test.ps1

  • Size

    4KB

  • Sample

    230822-r2743acg84

  • MD5

    4422523be2d072a231f5c63a23152b2a

  • SHA1

    fef355cb21d61acff12efc1500e2b91dd077c0eb

  • SHA256

    0ae49ad9aad43f93d995d303504c7d7d120274fd9e67e9654144163753a5325f

  • SHA512

    031dac0f292522cf682afdf69f0b6e79331218630268c38ca049cab9666696a203e23a975c0fda81f6cc552937ea0fb8bbba4cb46e220404c044e9515e5ce788

  • SSDEEP

    48:W6jy+MTVelmb74K2k/jP0/fAseviOaXjO5NyE3dP1HwmhFD1BqS+wGr3ilI:W6j5G1z2SP0/fXm/Hwmf8bjb

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.45.153:443/-JTHBmPCnMU-Lj8vWspAHgklwSoM02TmhLb1gZcNx1xarx3C6h1jNugVs_V_k67ddMJ_0MgHESxoor0Qcrju4M54_J-w1MhGYZfcdO5pM4JzvH_VCW

Targets

    • Target

      test.ps1

    • Size

      4KB

    • MD5

      4422523be2d072a231f5c63a23152b2a

    • SHA1

      fef355cb21d61acff12efc1500e2b91dd077c0eb

    • SHA256

      0ae49ad9aad43f93d995d303504c7d7d120274fd9e67e9654144163753a5325f

    • SHA512

      031dac0f292522cf682afdf69f0b6e79331218630268c38ca049cab9666696a203e23a975c0fda81f6cc552937ea0fb8bbba4cb46e220404c044e9515e5ce788

    • SSDEEP

      48:W6jy+MTVelmb74K2k/jP0/fAseviOaXjO5NyE3dP1HwmhFD1BqS+wGr3ilI:W6j5G1z2SP0/fXm/Hwmf8bjb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks