General

  • Target

    0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc

  • Size

    72KB

  • Sample

    240509-n5fbnsbb22

  • MD5

    71c534ef58ee024432b8562064354a8d

  • SHA1

    cfc3d9b4c500ee11e914f503c664ca224a20ce7c

  • SHA256

    0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc

  • SHA512

    db184aaaf520de7485814a178bd490934bffe3e544cdedaecc48ae90968a4fd65b1d4ec56a5d137a478e4a0b191deb90d1042f03d4784b5e9a7e26c5bbc662e0

  • SSDEEP

    1536:IHGCESCQlJu6inkWJYHCn5fXgYLzMb+KR0Nc8QsJq39:0hCQzuZYHa7e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.172:4444

Targets

    • Target

      0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc

    • Size

      72KB

    • MD5

      71c534ef58ee024432b8562064354a8d

    • SHA1

      cfc3d9b4c500ee11e914f503c664ca224a20ce7c

    • SHA256

      0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc

    • SHA512

      db184aaaf520de7485814a178bd490934bffe3e544cdedaecc48ae90968a4fd65b1d4ec56a5d137a478e4a0b191deb90d1042f03d4784b5e9a7e26c5bbc662e0

    • SSDEEP

      1536:IHGCESCQlJu6inkWJYHCn5fXgYLzMb+KR0Nc8QsJq39:0hCQzuZYHa7e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks