General

  • Target

    ebbb15b5c66c0d22100a1c8e1deb0a80N

  • Size

    72KB

  • Sample

    240910-176mvszbmh

  • MD5

    ebbb15b5c66c0d22100a1c8e1deb0a80

  • SHA1

    c5c7d56e84dccd6480130b991e11c4b231b25482

  • SHA256

    bc9a0253576f310655a84dbc0dfc63adf799325c890e2569416b85216eac3676

  • SHA512

    6a982d08f8698ba9e3fc67a231df55b1257e03b438c20f5a0e15b837a58a33a730c9f4092b83aaeaa9b9e2800e54bcd667c10e2e8e2ad74fadf54eb89752523e

  • SSDEEP

    1536:IpJGlGJNZkrXaDyrgmfchgjfeMb+KR0Nc8QsJq39:qJGlGNZmKDFmfugjWe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.2.4:4444

Targets

    • Target

      ebbb15b5c66c0d22100a1c8e1deb0a80N

    • Size

      72KB

    • MD5

      ebbb15b5c66c0d22100a1c8e1deb0a80

    • SHA1

      c5c7d56e84dccd6480130b991e11c4b231b25482

    • SHA256

      bc9a0253576f310655a84dbc0dfc63adf799325c890e2569416b85216eac3676

    • SHA512

      6a982d08f8698ba9e3fc67a231df55b1257e03b438c20f5a0e15b837a58a33a730c9f4092b83aaeaa9b9e2800e54bcd667c10e2e8e2ad74fadf54eb89752523e

    • SSDEEP

      1536:IpJGlGJNZkrXaDyrgmfchgjfeMb+KR0Nc8QsJq39:qJGlGNZmKDFmfugjWe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks