General

  • Target

    混沌互通.exe

  • Size

    1.8MB

  • Sample

    240524-rd6w4agg33

  • MD5

    c83c28b761b5fb2ae905cc84b05d3ef6

  • SHA1

    96bbd0875e545361b189f6f2afe17404f70669fc

  • SHA256

    5866341f645ed44f3f53d3a372891d7648bad7ba5aab55d90c6a8e60dbacfec5

  • SHA512

    1c3a0eee557e0c64e53e352a47bcb90f030b743d379e1fa23361963b4fd954307c868fd5f3f9b1ed53bfeba9021fc248ee2e9a25618e20dee4acb6bca443e40a

  • SSDEEP

    24576:/3vLRdVhZBK8NogWYO091OGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ13xJIiW0MbQxA

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

1.15.12.73:4567

Targets

    • Target

      混沌互通.exe

    • Size

      1.8MB

    • MD5

      c83c28b761b5fb2ae905cc84b05d3ef6

    • SHA1

      96bbd0875e545361b189f6f2afe17404f70669fc

    • SHA256

      5866341f645ed44f3f53d3a372891d7648bad7ba5aab55d90c6a8e60dbacfec5

    • SHA512

      1c3a0eee557e0c64e53e352a47bcb90f030b743d379e1fa23361963b4fd954307c868fd5f3f9b1ed53bfeba9021fc248ee2e9a25618e20dee4acb6bca443e40a

    • SSDEEP

      24576:/3vLRdVhZBK8NogWYO091OGi9J3YiWdCMJ5QxmjwC/hR:/3d5ZQ13xJIiW0MbQxA

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks