General

  • Target

    b1bbf3464d0f4b2461c7d56bbfc181091440e2e49588188e314ef2522e4f8c3d

  • Size

    72KB

  • Sample

    240820-tzjpsswcpn

  • MD5

    18774ed56160b809332da7cdc439f633

  • SHA1

    14c7495d81801f849695e709143ab582accfef27

  • SHA256

    b1bbf3464d0f4b2461c7d56bbfc181091440e2e49588188e314ef2522e4f8c3d

  • SHA512

    906890a6228807e8a6576849e043dbf6e5845ccf483aa536a959430759c40a1f93a920934853cbd0ea84a6347909167960c36095aefad2f3ada0628525b51e1c

  • SSDEEP

    1536:I0cTJ8k5J+36bfRosO7oMjLiz9CLCYMb+KR0Nc8QsJq39:HcTJDy6bZosOXj2sLCYe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

    • Target

      b1bbf3464d0f4b2461c7d56bbfc181091440e2e49588188e314ef2522e4f8c3d

    • Size

      72KB

    • MD5

      18774ed56160b809332da7cdc439f633

    • SHA1

      14c7495d81801f849695e709143ab582accfef27

    • SHA256

      b1bbf3464d0f4b2461c7d56bbfc181091440e2e49588188e314ef2522e4f8c3d

    • SHA512

      906890a6228807e8a6576849e043dbf6e5845ccf483aa536a959430759c40a1f93a920934853cbd0ea84a6347909167960c36095aefad2f3ada0628525b51e1c

    • SSDEEP

      1536:I0cTJ8k5J+36bfRosO7oMjLiz9CLCYMb+KR0Nc8QsJq39:HcTJDy6bZosOXj2sLCYe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks