General

  • Target

    3c5fe39d237163ec1bc6efa5c9405330_NEAS

  • Size

    72KB

  • Sample

    240507-atcvhsdb85

  • MD5

    3c5fe39d237163ec1bc6efa5c9405330

  • SHA1

    44f465e13cca20d0546bb156ea9dd046c47920f5

  • SHA256

    be251f45c77a749cf632b554422db6bd0274539a311f5039702a3999cfff2a3c

  • SHA512

    2d5269ca430b04735160aaa3a7ff5c7f915a345a7d8ddac8c379c2be1a6428d474f0db48142ff02fe3b1f4d8869fd3093acd0171d7da89182d27d70cff2944b4

  • SSDEEP

    1536:IF4Qz/HjGDuIGe8aBssUe+s2eKu/QlFBYn4lh/qXMb+KR0Nc8QsJq39:crG6I3zUreKxFPh8e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

156.116.114.12:45303

Targets

    • Target

      3c5fe39d237163ec1bc6efa5c9405330_NEAS

    • Size

      72KB

    • MD5

      3c5fe39d237163ec1bc6efa5c9405330

    • SHA1

      44f465e13cca20d0546bb156ea9dd046c47920f5

    • SHA256

      be251f45c77a749cf632b554422db6bd0274539a311f5039702a3999cfff2a3c

    • SHA512

      2d5269ca430b04735160aaa3a7ff5c7f915a345a7d8ddac8c379c2be1a6428d474f0db48142ff02fe3b1f4d8869fd3093acd0171d7da89182d27d70cff2944b4

    • SSDEEP

      1536:IF4Qz/HjGDuIGe8aBssUe+s2eKu/QlFBYn4lh/qXMb+KR0Nc8QsJq39:crG6I3zUreKxFPh8e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks