General

  • Target

    65d3606b6aabe150d65b3991c4271ecff16b4cf882ffc75a4b3580a9bd160daa

  • Size

    888KB

  • Sample

    240424-gzqrwsfd8t

  • MD5

    f8a66f4eaf0251d95c30e8b57fd35ee0

  • SHA1

    611241b4fa34c2dd63b68e4198496ceed7a19057

  • SHA256

    65d3606b6aabe150d65b3991c4271ecff16b4cf882ffc75a4b3580a9bd160daa

  • SHA512

    7e06c0db70dbe58bc07ed54fad6b62b5fc9db37228ee46fcbe5cfaf2404e043c33fc745da12041bff494010912e4f5a62af343ef899b7a16135b0c2c5006faef

  • SSDEEP

    12288:HW9vo+eIiE84UoSqjRzRLPFDlXnrIpOfrXU6cDqjTIaJ/o69gghSX2bNEdzYQkOK:svoNILCoSqfRwZznr8TqZbzNWsClug

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.22:4444

Targets

    • Target

      65d3606b6aabe150d65b3991c4271ecff16b4cf882ffc75a4b3580a9bd160daa

    • Size

      888KB

    • MD5

      f8a66f4eaf0251d95c30e8b57fd35ee0

    • SHA1

      611241b4fa34c2dd63b68e4198496ceed7a19057

    • SHA256

      65d3606b6aabe150d65b3991c4271ecff16b4cf882ffc75a4b3580a9bd160daa

    • SHA512

      7e06c0db70dbe58bc07ed54fad6b62b5fc9db37228ee46fcbe5cfaf2404e043c33fc745da12041bff494010912e4f5a62af343ef899b7a16135b0c2c5006faef

    • SSDEEP

      12288:HW9vo+eIiE84UoSqjRzRLPFDlXnrIpOfrXU6cDqjTIaJ/o69gghSX2bNEdzYQkOK:svoNILCoSqfRwZznr8TqZbzNWsClug

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks