General

  • Target

    f4ae06ed7e1d75ab4f53bc47183fa77b01f5163ebf13607b0c0d6040351a7fb2

  • Size

    72KB

  • Sample

    240423-ge76fadh34

  • MD5

    130b3fd2c509c5d2d9aa3cffcd6dafaa

  • SHA1

    f7723eec6118c0577c95bc63501d3fdd93f13eca

  • SHA256

    f4ae06ed7e1d75ab4f53bc47183fa77b01f5163ebf13607b0c0d6040351a7fb2

  • SHA512

    5f16a5626853dc0234adea0e691bfea5fe37344ebb8892abee01cba312f45420b358eadf58c413c6ceeb9317420752125bce9de7ca0b42c000272b989f096026

  • SSDEEP

    1536:ITQSFnl7PIEpW61eop5ZMb+KR0Nc8QsJq39:CQanlUBieWZe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

249.57.210.225:5060

Targets

    • Target

      f4ae06ed7e1d75ab4f53bc47183fa77b01f5163ebf13607b0c0d6040351a7fb2

    • Size

      72KB

    • MD5

      130b3fd2c509c5d2d9aa3cffcd6dafaa

    • SHA1

      f7723eec6118c0577c95bc63501d3fdd93f13eca

    • SHA256

      f4ae06ed7e1d75ab4f53bc47183fa77b01f5163ebf13607b0c0d6040351a7fb2

    • SHA512

      5f16a5626853dc0234adea0e691bfea5fe37344ebb8892abee01cba312f45420b358eadf58c413c6ceeb9317420752125bce9de7ca0b42c000272b989f096026

    • SSDEEP

      1536:ITQSFnl7PIEpW61eop5ZMb+KR0Nc8QsJq39:CQanlUBieWZe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks