General

  • Target

    b40e4e11e4115ba15fc59efb7f7c2080N

  • Size

    72KB

  • Sample

    240909-hsc3wsyepg

  • MD5

    b40e4e11e4115ba15fc59efb7f7c2080

  • SHA1

    99aff91a2f231807386472701a467e82d01da314

  • SHA256

    27bb6fa4016518973cf81ae21a0f3d6bcbbcd54f5d764b354cbbdc5fc6d238fa

  • SHA512

    96211160d7473ed26b06965c2674aa8ec310f8aac5fc5e37c17e92abccb354138e9b296f10dd1a1a85316d14668a739092a3b639dff3d8236d8d32bd45a07528

  • SSDEEP

    1536:IETXaMcOZSP/x/Q+B2cP0Am+vkQMb+KR0Nc8QsJq39:zzxxZSR4MpbTe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.137.75:4444

Targets

    • Target

      b40e4e11e4115ba15fc59efb7f7c2080N

    • Size

      72KB

    • MD5

      b40e4e11e4115ba15fc59efb7f7c2080

    • SHA1

      99aff91a2f231807386472701a467e82d01da314

    • SHA256

      27bb6fa4016518973cf81ae21a0f3d6bcbbcd54f5d764b354cbbdc5fc6d238fa

    • SHA512

      96211160d7473ed26b06965c2674aa8ec310f8aac5fc5e37c17e92abccb354138e9b296f10dd1a1a85316d14668a739092a3b639dff3d8236d8d32bd45a07528

    • SSDEEP

      1536:IETXaMcOZSP/x/Q+B2cP0Am+vkQMb+KR0Nc8QsJq39:zzxxZSR4MpbTe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks