General

  • Target
    Счёт на оплату.docm
  • Size 33KB
  • Sample240619-lt5fbasfnn
  • SHA256 3e7e321ca46b1337d69b9d39ad4dc1b268abb33c9331c06ad07fbb93f29fab89
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • metasploit

Version
  • windows/reverse_http

C2
  • http://8.8.8.8:5555/zSE9R66S0rraBdsEuVDCbAcHm4d4HwfrCxUPZVx9puos4rwEtJYcq6pkDktx6eSFYy7kU5oq35RNY-dTUHVT8PkQK697FEhhVal855uLYDsu7kkGa5HPh-A_RSCMYlNagTI5RlAPwzzT3itpLVl0bgaf6gwEd8aYdSKGaoH77_3vcEsKMQlq6uuEh7qF8nE

Targets

    • Target
      Счёт на оплату.docm
    • Size 33KB
    • SHA256 3e7e321ca46b1337d69b9d39ad4dc1b268abb33c9331c06ad07fbb93f29fab89
    • MD5 SHA1 SHA512 SSDEEP
    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

MITRE ATT&CK Enterprise v15

Tasks