General

  • Target

    5555513a3b9066871c7d89b9fbc45a30_NEAS

  • Size

    72KB

  • Sample

    240507-ndv8tade3w

  • MD5

    5555513a3b9066871c7d89b9fbc45a30

  • SHA1

    6280cc056a58c3d172a542e6937d132b40574f6e

  • SHA256

    be300af894d240e3357db0ec8e15ef1c9f922212860a3f49ffe6ae0f9a24eb0d

  • SHA512

    8e6b60e0528e335858f0a777a197761b30f2757c7dc6b4f3d7dd188c27f63f6c8912d61fb2c52bcc066d2eae31c4971a2266703ae9a66ca54fa9b246a2498820

  • SSDEEP

    1536:Io/YYUl2IzK6ra2TLUtWjYTxUMb+KR0Nc8QsJq39:L/WYIzKsLLcTxUe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.128:3001

Targets

    • Target

      5555513a3b9066871c7d89b9fbc45a30_NEAS

    • Size

      72KB

    • MD5

      5555513a3b9066871c7d89b9fbc45a30

    • SHA1

      6280cc056a58c3d172a542e6937d132b40574f6e

    • SHA256

      be300af894d240e3357db0ec8e15ef1c9f922212860a3f49ffe6ae0f9a24eb0d

    • SHA512

      8e6b60e0528e335858f0a777a197761b30f2757c7dc6b4f3d7dd188c27f63f6c8912d61fb2c52bcc066d2eae31c4971a2266703ae9a66ca54fa9b246a2498820

    • SSDEEP

      1536:Io/YYUl2IzK6ra2TLUtWjYTxUMb+KR0Nc8QsJq39:L/WYIzKsLLcTxUe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks