General

  • Target

    天神魔域.exe

  • Size

    1.8MB

  • Sample

    240524-p7apmseb22

  • MD5

    5e3b27ad011681c8f3a4338d82772e8a

  • SHA1

    e6b4657011102a10dfbd1f54d4765f3422df40ca

  • SHA256

    ceab7cefdbb9c62221c85cf138a2446c4460c3701e463487906eba23b6df6844

  • SHA512

    ddcf1010e422babb2a13d1402d50209431f632ab8c349da2b8a708c6bb425c3bf2d655709c222b230f1044b94ce7be0c4bf9d79eab26946549ab8f0a1547d10a

  • SSDEEP

    24576:/3vLRdVhZBK8NogWYO098OGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ18xJIiW0MbQxA

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

1.15.12.73:4567

Targets

    • Target

      天神魔域.exe

    • Size

      1.8MB

    • MD5

      5e3b27ad011681c8f3a4338d82772e8a

    • SHA1

      e6b4657011102a10dfbd1f54d4765f3422df40ca

    • SHA256

      ceab7cefdbb9c62221c85cf138a2446c4460c3701e463487906eba23b6df6844

    • SHA512

      ddcf1010e422babb2a13d1402d50209431f632ab8c349da2b8a708c6bb425c3bf2d655709c222b230f1044b94ce7be0c4bf9d79eab26946549ab8f0a1547d10a

    • SSDEEP

      24576:/3vLRdVhZBK8NogWYO098OGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ18xJIiW0MbQxA

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks