General

  • Target

    2024-05-03_6d67a3bdd5317d782d550ce7bc4fef46_avoslocker

  • Size

    2.2MB

  • Sample

    240503-nnznzsfe36

  • MD5

    6d67a3bdd5317d782d550ce7bc4fef46

  • SHA1

    ab3af9bc1d31a202f3729f5d553d2690a0be5e97

  • SHA256

    557ce31352a4559d90fdcb633b9041b2f2645b53b320b0c8849fb85e9ccf8492

  • SHA512

    1cdd71989cdba9cfecb7caa18cca8634531590e58c9a313596f1cd161abd36f0612bd7e1d745964cde093713128f57e5f2801837a6556afadad6afa2fb56da93

  • SSDEEP

    49152:Wv+BF5f37D5to87s3Kv3mqI6VeOMjUfkptVxIyijdTB:Wv+BFB3X7oMs3Kv3mjUu5SB

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp_dns

C2

192.168.0.5:443

Targets

    • Target

      2024-05-03_6d67a3bdd5317d782d550ce7bc4fef46_avoslocker

    • Size

      2.2MB

    • MD5

      6d67a3bdd5317d782d550ce7bc4fef46

    • SHA1

      ab3af9bc1d31a202f3729f5d553d2690a0be5e97

    • SHA256

      557ce31352a4559d90fdcb633b9041b2f2645b53b320b0c8849fb85e9ccf8492

    • SHA512

      1cdd71989cdba9cfecb7caa18cca8634531590e58c9a313596f1cd161abd36f0612bd7e1d745964cde093713128f57e5f2801837a6556afadad6afa2fb56da93

    • SSDEEP

      49152:Wv+BF5f37D5to87s3Kv3mqI6VeOMjUfkptVxIyijdTB:Wv+BFB3X7oMs3Kv3mjUu5SB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks