General

  • Target

    6c055a021e4446a6d4f3c25690988c10N

  • Size

    513KB

  • Sample

    240908-c6xfsszhlr

  • MD5

    6c055a021e4446a6d4f3c25690988c10

  • SHA1

    81661d0510c4b8a4a5c9bf7955c8cd4ed891c1b1

  • SHA256

    956bd5ac5746f4e92c9ae97c77e714188ebfb49e7552113dafe871e62853860e

  • SHA512

    06ce4de973c7baeb53f27a9b2965f24bf8d49a216c8449d8d66d62c2d54d386e74d974adeab773d36d817bf6fe56ea5e67d66cbbdaf1b157c6522f399efc1c6e

  • SSDEEP

    12288:bHAE+gcDDzlWnnqIDmaFMUA7VwnNwcDETWEfD6l/JuJwBpf9:bHAZ7z6nqOwUA7Vwn3DETWCwuqX

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://139.162.249.106:4444/9dPuUFpOeQ_mZudnh_Bk-gB3qENo3TtVIO1XahDnEp9dYlN98R8WEzbaRv-XnQuPRJxx4Y-98k3fwiEKUgHRAftoYFiwaXDFU4fty1ZfyvSILA0P-NZauCtJHFpPtBiVkyTrXvBZX5t6yGOXuefG1UC14v8uMSaWyvOqd

Targets

    • Target

      6c055a021e4446a6d4f3c25690988c10N

    • Size

      513KB

    • MD5

      6c055a021e4446a6d4f3c25690988c10

    • SHA1

      81661d0510c4b8a4a5c9bf7955c8cd4ed891c1b1

    • SHA256

      956bd5ac5746f4e92c9ae97c77e714188ebfb49e7552113dafe871e62853860e

    • SHA512

      06ce4de973c7baeb53f27a9b2965f24bf8d49a216c8449d8d66d62c2d54d386e74d974adeab773d36d817bf6fe56ea5e67d66cbbdaf1b157c6522f399efc1c6e

    • SSDEEP

      12288:bHAE+gcDDzlWnnqIDmaFMUA7VwnNwcDETWEfD6l/JuJwBpf9:bHAZ7z6nqOwUA7Vwn3DETWCwuqX

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks