General

  • Target

    4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

  • Size

    5KB

  • Sample

    240329-flvcgsba29

  • MD5

    d8749aaa55fcb619256e735332f3e3f9

  • SHA1

    40b20f74004a682762001d7b32ea0b56969e4e11

  • SHA256

    4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

  • SHA512

    4b472e26618e86c62e184b05fa7104e2fd705845ca1bf778c4d94f4047485393a7b4a08b88aa2a824caffc58913cdabd2f3faba6541618091b6042de83550c15

  • SSDEEP

    48:6PHH1U8lmvsgMuoRjSEnSv69TJdqg+OPuld0D5I:6qd8tdSyRJdYf0D

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.54:4313

Targets

    • Target

      4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

    • Size

      5KB

    • MD5

      d8749aaa55fcb619256e735332f3e3f9

    • SHA1

      40b20f74004a682762001d7b32ea0b56969e4e11

    • SHA256

      4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

    • SHA512

      4b472e26618e86c62e184b05fa7104e2fd705845ca1bf778c4d94f4047485393a7b4a08b88aa2a824caffc58913cdabd2f3faba6541618091b6042de83550c15

    • SSDEEP

      48:6PHH1U8lmvsgMuoRjSEnSv69TJdqg+OPuld0D5I:6qd8tdSyRJdYf0D

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks