General

  • Target

    618e641017a7e9e05f8b3725c33842960d81e77a74fcfd59710b563ba643a849

  • Size

    72KB

  • Sample

    240330-ysfrsadc8z

  • MD5

    c7f615807c1eebbc86f256c6645ae62d

  • SHA1

    6fbd0b4356663aca75813668316e91d661894548

  • SHA256

    618e641017a7e9e05f8b3725c33842960d81e77a74fcfd59710b563ba643a849

  • SHA512

    1377a96b5c1e3aa708232d0ead649c50c8530adcab4b2a65911f7b3162c142683cdd725abed19887257f61a11a593f4e3f184217d3821ff0534d407d1eea84d6

  • SSDEEP

    1536:I/7JqdcTKsHHK3xRXNAXNAtU0NpIjMb+KR0Nc8QsJq39:W7JscTKsHq3NwAHpMe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.0.2.15:8080/s-LzZqARVMZrS2pKDU4ZsAzR2ydVAWV_iTXh_bLY0yUF3XA9YpQcfHr0PEVHcI927mcahdihLd924j-9SV0oeEzlxPBayKewpxt_eeX2fNLWQIusTgaN--L7mUYK7X39nla1DDeBmfrkb4r4-4txYiuNq896-c7MJMrCqIg_KSwbJLEBs1gk852yDY9CMuh

Targets

    • Target

      618e641017a7e9e05f8b3725c33842960d81e77a74fcfd59710b563ba643a849

    • Size

      72KB

    • MD5

      c7f615807c1eebbc86f256c6645ae62d

    • SHA1

      6fbd0b4356663aca75813668316e91d661894548

    • SHA256

      618e641017a7e9e05f8b3725c33842960d81e77a74fcfd59710b563ba643a849

    • SHA512

      1377a96b5c1e3aa708232d0ead649c50c8530adcab4b2a65911f7b3162c142683cdd725abed19887257f61a11a593f4e3f184217d3821ff0534d407d1eea84d6

    • SSDEEP

      1536:I/7JqdcTKsHHK3xRXNAXNAtU0NpIjMb+KR0Nc8QsJq39:W7JscTKsHq3NwAHpMe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks