General

  • Target

    5cc16e2dd89d04c766502147d417cd7af3f8344777ca8c2fb56176542fa7f594

  • Size

    43KB

  • Sample

    240516-gzh22sfd7t

  • MD5

    9c5a559555d34eab8a7c37091817230f

  • SHA1

    7fa17a46875b2194f4ceaa6cce422f2770aeebe6

  • SHA256

    5cc16e2dd89d04c766502147d417cd7af3f8344777ca8c2fb56176542fa7f594

  • SHA512

    da95795301973d39071e581aaddd7010f9a07aab4092295cca2993b8283cbe3c3199659f7370f443c8c1ed7062f2d82e3079177572eeeaac7ef500c83fccc0f0

  • SSDEEP

    768:hCBPlp/VB0LpiY9s2bYi3h0r6xv3NVsHExPEO13ifofBlbiDI64hKAlKee3yVpw:+B01jdR0rE9Vxd9iKtiIXKyeCV6

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

146.190.15.117:60169

Targets

    • Target

      8da5e7a715c0ca9d2022c2f18225471cb653f4a84e29ced56a12f9f9c991314d.exe

    • Size

      72KB

    • MD5

      97d4ad01a0fcdd075aabf3f66f04b848

    • SHA1

      71207d39d4f1a9b5c001b184178d8ea852e4f948

    • SHA256

      8da5e7a715c0ca9d2022c2f18225471cb653f4a84e29ced56a12f9f9c991314d

    • SHA512

      db5033953071e13894182166a76777245c60b1c65c24eb49a6b30c82676e92666c97322c564bb5632be78ff98a81398e0c6bdbfdf2ec0c164b687db7668e5f6f

    • SSDEEP

      1536:IgOE1Hd6Jj3uOEKiwNoFNkk5rv4zxfJiv6Mb+KR0Nc8QsJq39:hr2UrFNkkoxxiv6e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks