General

  • Target

    004dee7b5c953a4c32a820fd732362d608be7e1314cf1692284d5d2ddebcd3a8

  • Size

    72KB

  • Sample

    240505-wpdrxagg6s

  • MD5

    90906d79e30b1beca28b6ecef6fc9b66

  • SHA1

    3ecde25fc11a93f99999ed38ad887023dff5bee7

  • SHA256

    004dee7b5c953a4c32a820fd732362d608be7e1314cf1692284d5d2ddebcd3a8

  • SHA512

    06e451c7afc98776bc3d1e41cb0173bcb035939ef0dc7f4aefa14f77206bb7e777f9790585fbc00f32307c92f3f7a421b7bde9fffdb1a918bb5324dce563d996

  • SSDEEP

    1536:IuEEUi81GqFKxSwsrccY6H7/B6Mb+KR0Nc8QsJq39:qEU91tKbicNYB6e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.20.34.100:4444

Targets

    • Target

      004dee7b5c953a4c32a820fd732362d608be7e1314cf1692284d5d2ddebcd3a8

    • Size

      72KB

    • MD5

      90906d79e30b1beca28b6ecef6fc9b66

    • SHA1

      3ecde25fc11a93f99999ed38ad887023dff5bee7

    • SHA256

      004dee7b5c953a4c32a820fd732362d608be7e1314cf1692284d5d2ddebcd3a8

    • SHA512

      06e451c7afc98776bc3d1e41cb0173bcb035939ef0dc7f4aefa14f77206bb7e777f9790585fbc00f32307c92f3f7a421b7bde9fffdb1a918bb5324dce563d996

    • SSDEEP

      1536:IuEEUi81GqFKxSwsrccY6H7/B6Mb+KR0Nc8QsJq39:qEU91tKbicNYB6e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks