General

  • Target

    77aab90eadb7dba681825e88ab77b1bcf16926842caa2b6e552f2db78d89ffce

  • Size

    1.9MB

  • Sample

    240104-twtetsfeh3

  • MD5

    fa07e8d37a403e58cb23fd9e675d5a48

  • SHA1

    476f19cfb85e07362c903bc801ff4ba950ead7e5

  • SHA256

    77aab90eadb7dba681825e88ab77b1bcf16926842caa2b6e552f2db78d89ffce

  • SHA512

    87ff1326e244024dec57e349745d75bf4b82f2f01b82e0a2ac8a42c5fc2c3aeaf29bf6623177d5bb852ac5db1777de45b7de0a71740744c06f32d1d0b692c72e

  • SSDEEP

    24576:bp8Cep8+CfFjjrppBWSllFPidM3gatUpne4QmCfcitHB9C9vnA6QjTLBy6:PFYSFPaM3gNith9C9vA68TLb

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.16.128:5555

Targets

    • Target

      77aab90eadb7dba681825e88ab77b1bcf16926842caa2b6e552f2db78d89ffce

    • Size

      1.9MB

    • MD5

      fa07e8d37a403e58cb23fd9e675d5a48

    • SHA1

      476f19cfb85e07362c903bc801ff4ba950ead7e5

    • SHA256

      77aab90eadb7dba681825e88ab77b1bcf16926842caa2b6e552f2db78d89ffce

    • SHA512

      87ff1326e244024dec57e349745d75bf4b82f2f01b82e0a2ac8a42c5fc2c3aeaf29bf6623177d5bb852ac5db1777de45b7de0a71740744c06f32d1d0b692c72e

    • SSDEEP

      24576:bp8Cep8+CfFjjrppBWSllFPidM3gatUpne4QmCfcitHB9C9vnA6QjTLBy6:PFYSFPaM3gNith9C9vA68TLb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks