General

  • Target

    ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa

  • Size

    37KB

  • Sample

    240624-1sm7zaxalq

  • MD5

    697e5b6be7f05596b54956e1c3d0cfdf

  • SHA1

    07a1e8a0c74df4c0a6a6921568b56a012ee797f9

  • SHA256

    ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa

  • SHA512

    ab4bfc6fb128f050416abe1865749a56cd2d916d7f97fcde1b17c9ab9ab47c88b0db3ba4188c6d29e8a63330ca11f9977db16709f7ae43c78ac60f728cb31baa

  • SSDEEP

    384:On8iSsqdg1vA9cbVH532g7SQdrNy+pJdH50jntC:OE+1o9uHYg7bPy+pJd5

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.49.70:443/FuWHUSPkzR6om6mazuKW1wDZnM_74FEMqlOMU4x5nOnOxuxeWzqJr1bmslS3dMJDASTwuuRuM3qTCypahl4NfsrYNi7f7YaR6X3VOQNjRR11sMdYCcUAXcm-kqSk-vN6bERIl1f8sleXNRwhBbjejPyhh5LvhR4MnGnteM1QRLF-SZyuHrvUwiZm1PDYuyfuP36ncCtXgvaZOupgQuel-MK_yLc3Oqup5xBD4mT7E9c4B6

Targets

    • Target

      ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa

    • Size

      37KB

    • MD5

      697e5b6be7f05596b54956e1c3d0cfdf

    • SHA1

      07a1e8a0c74df4c0a6a6921568b56a012ee797f9

    • SHA256

      ff42cadcc2330931d543161391a98f21f03ced156aa0764d874488f60228f7fa

    • SHA512

      ab4bfc6fb128f050416abe1865749a56cd2d916d7f97fcde1b17c9ab9ab47c88b0db3ba4188c6d29e8a63330ca11f9977db16709f7ae43c78ac60f728cb31baa

    • SSDEEP

      384:On8iSsqdg1vA9cbVH532g7SQdrNy+pJdH50jntC:OE+1o9uHYg7bPy+pJd5

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks