General

  • Target

    da9d192fe2c4748ef863001fb6765f25a35b0ebcf08b8799e80ed6f956d923a0

  • Size

    720KB

  • Sample

    231125-ypwc3acd83

  • MD5

    7a9ff35dceb57e554dc47f7486af0203

  • SHA1

    d8006e758ac57a96d1d4302a2b70f3f8fd51c343

  • SHA256

    da9d192fe2c4748ef863001fb6765f25a35b0ebcf08b8799e80ed6f956d923a0

  • SHA512

    7c72f5b158a58bc53e244bcfa19b9faf3f358c084e52d26ef90fd55253252c429cef369fcbc008a57496b9a473bacaf355242f0956782dd7008b7c21641e7537

  • SSDEEP

    12288:ZjMvvbafVLyGdUGAgY150ezsTK8/JIjbTtOd/yW:ZjMvvmf9yEURzC6sTK8xIjbTt7W

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

152.136.174.227:111

Targets

    • Target

      da9d192fe2c4748ef863001fb6765f25a35b0ebcf08b8799e80ed6f956d923a0

    • Size

      720KB

    • MD5

      7a9ff35dceb57e554dc47f7486af0203

    • SHA1

      d8006e758ac57a96d1d4302a2b70f3f8fd51c343

    • SHA256

      da9d192fe2c4748ef863001fb6765f25a35b0ebcf08b8799e80ed6f956d923a0

    • SHA512

      7c72f5b158a58bc53e244bcfa19b9faf3f358c084e52d26ef90fd55253252c429cef369fcbc008a57496b9a473bacaf355242f0956782dd7008b7c21641e7537

    • SSDEEP

      12288:ZjMvvbafVLyGdUGAgY150ezsTK8/JIjbTtOd/yW:ZjMvvmf9yEURzC6sTK8xIjbTt7W

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks