General

  • Target

    4052808933352ca1d48c49de6c7635d3736de9a8665cb40b74f7c5fdf72c01a3

  • Size

    36KB

  • Sample

    240910-zy8v7awgrd

  • MD5

    10e8b4603e3d74e1313a8b1bfe769aba

  • SHA1

    7c3be0d85bcaaa2971cd11d27daa3a768dbac607

  • SHA256

    4052808933352ca1d48c49de6c7635d3736de9a8665cb40b74f7c5fdf72c01a3

  • SHA512

    250f7ff7d06ab1bd1e0783be6161c5abad63038846d09cb1e93acc1039c55a32296ecd22392e3cb22a1821bf032325da0661c6f1d603346e4b853579384dc7a6

  • SSDEEP

    384:V2iSwvxjk+t06DANg0jnYp+pwImOHZeAtg:VZxw+tWyeYp+pwiHZ

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.0.2.10:443/p4DfyETEFRQZvRi8f116CwyCwZ3NbYRQwuNfuZ3EWMO42NyZCQHvcfroriyiuo5PukNI-RN067bhqoc294am5cEIgLw7uf114beUn2K9F1hCPsWKfTiP-nK9pqz-Jwntm8YeIge8gVM4YLkTLkWs2uIA3FX6kUJknwWLQfffuKyg8wVy3jHUrhtee7R4fh0_MnqL

Targets

    • Target

      4052808933352ca1d48c49de6c7635d3736de9a8665cb40b74f7c5fdf72c01a3

    • Size

      36KB

    • MD5

      10e8b4603e3d74e1313a8b1bfe769aba

    • SHA1

      7c3be0d85bcaaa2971cd11d27daa3a768dbac607

    • SHA256

      4052808933352ca1d48c49de6c7635d3736de9a8665cb40b74f7c5fdf72c01a3

    • SHA512

      250f7ff7d06ab1bd1e0783be6161c5abad63038846d09cb1e93acc1039c55a32296ecd22392e3cb22a1821bf032325da0661c6f1d603346e4b853579384dc7a6

    • SSDEEP

      384:V2iSwvxjk+t06DANg0jnYp+pwImOHZeAtg:VZxw+tWyeYp+pwiHZ

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks