General

  • Target

    1c58c3282dfbd01a1dce49e13f0c79c6

  • Size

    72KB

  • Sample

    231230-zsr1gsgdcq

  • MD5

    1c58c3282dfbd01a1dce49e13f0c79c6

  • SHA1

    fac46ba6cc3241b8c728f9b091af2f9faea610ca

  • SHA256

    3f1ffd76339e3e888b2c279abfa08b36ed99295758d63a1f82bb670d72f5d381

  • SHA512

    fe5138c7c1f68efc4e03f3d1ea3b7ce42a1aae536548fc74c16ff723a82078cbad417970ef0a4ed7d80a24c675200024a771498801bbf3bcb0a555f8cb6d59e8

  • SSDEEP

    1536:IXVuthSzTcKCv2ykP6h0vpbBvhMb+KR0Nc8QsJq39:ayucKCOykyhklvhe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

90.147.42.34:4444

Targets

    • Target

      1c58c3282dfbd01a1dce49e13f0c79c6

    • Size

      72KB

    • MD5

      1c58c3282dfbd01a1dce49e13f0c79c6

    • SHA1

      fac46ba6cc3241b8c728f9b091af2f9faea610ca

    • SHA256

      3f1ffd76339e3e888b2c279abfa08b36ed99295758d63a1f82bb670d72f5d381

    • SHA512

      fe5138c7c1f68efc4e03f3d1ea3b7ce42a1aae536548fc74c16ff723a82078cbad417970ef0a4ed7d80a24c675200024a771498801bbf3bcb0a555f8cb6d59e8

    • SSDEEP

      1536:IXVuthSzTcKCv2ykP6h0vpbBvhMb+KR0Nc8QsJq39:ayucKCOykyhklvhe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks