General

  • Target

    4782b57b81c415fae0875a4e9ffdd76bdcd79d2ebf6dc2111dac39b6ad95c70e

  • Size

    1.5MB

  • Sample

    240518-h41y4ahc8s

  • MD5

    5ff4c8db6abe607c671291d19d87ecf1

  • SHA1

    db8e4f7e36b5464fab8dda16349f7d8fccfdfd13

  • SHA256

    4782b57b81c415fae0875a4e9ffdd76bdcd79d2ebf6dc2111dac39b6ad95c70e

  • SHA512

    8efd1ce87d20fd0051556f0f97afede8305981f5e53570428ffaaa0b34c59fc85ca5b5047d1965d5c5108f9521dc1bce5a224f755c951c501590bee2d1dca9aa

  • SSDEEP

    24576:G+NtalNRxpCSHLVfWbgYJBWwg0ab1AYs:G+ClxpCSHOgYJ3g0ab1AY

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.213.128:8888

Targets

    • Target

      4782b57b81c415fae0875a4e9ffdd76bdcd79d2ebf6dc2111dac39b6ad95c70e

    • Size

      1.5MB

    • MD5

      5ff4c8db6abe607c671291d19d87ecf1

    • SHA1

      db8e4f7e36b5464fab8dda16349f7d8fccfdfd13

    • SHA256

      4782b57b81c415fae0875a4e9ffdd76bdcd79d2ebf6dc2111dac39b6ad95c70e

    • SHA512

      8efd1ce87d20fd0051556f0f97afede8305981f5e53570428ffaaa0b34c59fc85ca5b5047d1965d5c5108f9521dc1bce5a224f755c951c501590bee2d1dca9aa

    • SSDEEP

      24576:G+NtalNRxpCSHLVfWbgYJBWwg0ab1AYs:G+ClxpCSHOgYJ3g0ab1AY

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks