Resubmissions

19/12/2023, 15:20

231219-sq44pscgdp 10

19/12/2023, 10:59

231219-m3wefagghj 10

General

  • Target

    0ee193c3f8f872bd8977991141ed7e16

  • Size

    255KB

  • Sample

    231219-m3wefagghj

  • MD5

    0ee193c3f8f872bd8977991141ed7e16

  • SHA1

    e6aae720bc9c024b9a202cd547f162a25224297f

  • SHA256

    e27d46e3fe68a2bca07d513a138d4f8fb15e77696e709acb6ab907e54ef7867c

  • SHA512

    ae0fa79fcce8234769341e2d7311c5a0e5a53853e61d53a73f7b961cfe2a7499c724692e60f24b041558080eef2413f610b5d38222a42a188d95600f831c8a04

  • SSDEEP

    3072:mAFNeuTg3+LkRuUsAd6v7eFopFNnkxcZcOUmoz93z8aKDe8hNau7XcgSZ0:FNxTLLLhAd6UopFAuKD1ue8hNauXb

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://144.48.4.202:443/d16A9OeCMfGyVbNU6P3TRQiItmJrq_N2d57dKAUlkyt71ID5

Targets

    • Target

      0ee193c3f8f872bd8977991141ed7e16

    • Size

      255KB

    • MD5

      0ee193c3f8f872bd8977991141ed7e16

    • SHA1

      e6aae720bc9c024b9a202cd547f162a25224297f

    • SHA256

      e27d46e3fe68a2bca07d513a138d4f8fb15e77696e709acb6ab907e54ef7867c

    • SHA512

      ae0fa79fcce8234769341e2d7311c5a0e5a53853e61d53a73f7b961cfe2a7499c724692e60f24b041558080eef2413f610b5d38222a42a188d95600f831c8a04

    • SSDEEP

      3072:mAFNeuTg3+LkRuUsAd6v7eFopFNnkxcZcOUmoz93z8aKDe8hNau7XcgSZ0:FNxTLLLhAd6UopFAuKD1ue8hNauXb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks