General

  • Target

    登录器.exe

  • Size

    1.8MB

  • Sample

    240509-nt5r7aff6z

  • MD5

    b7d457bd20eab09e7f2a416544c8f787

  • SHA1

    59e1932fca53fb6a7d71257c1c378edc69bf2310

  • SHA256

    718c286aa64a9c74cd603c12f4a64aca32ccb03027410b7c63c2735c74537be3

  • SHA512

    692bdd04822c67a3772a9c6f5aaa1f50bb5a1bb367e894e07b7f5b85bdfab70aa68a66de83ac224282b6f5f771c08ecc0955272dbbd3acd25febdb91ebae0742

  • SSDEEP

    24576:/3vLRdVhZBK8NogWYO09POGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ1dxJIiW0MbQxA

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

1.15.12.73:4567

Targets

    • Target

      登录器.exe

    • Size

      1.8MB

    • MD5

      b7d457bd20eab09e7f2a416544c8f787

    • SHA1

      59e1932fca53fb6a7d71257c1c378edc69bf2310

    • SHA256

      718c286aa64a9c74cd603c12f4a64aca32ccb03027410b7c63c2735c74537be3

    • SHA512

      692bdd04822c67a3772a9c6f5aaa1f50bb5a1bb367e894e07b7f5b85bdfab70aa68a66de83ac224282b6f5f771c08ecc0955272dbbd3acd25febdb91ebae0742

    • SSDEEP

      24576:/3vLRdVhZBK8NogWYO09POGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ1dxJIiW0MbQxA

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks