General

  • Target

    22684dfe0e32d464893d88964720d610N.exe

  • Size

    72KB

  • Sample

    240911-fx9asathkp

  • MD5

    22684dfe0e32d464893d88964720d610

  • SHA1

    49a8b2cd74681e59caeb05ddb138d59470662963

  • SHA256

    58d2fecddc8fa8ffdfb668ea3ee2e75796462010ac5a4f877638ff300bfc708d

  • SHA512

    341f7994c82d0449b3a63c3851dfef751f592837b3c7b80d987a61d003669b7598fafc9760b521db4f402a40a533691f860b0f10b44e0ca456e4d049e2540e4e

  • SSDEEP

    1536:IIOiNpGXZBZJDSTvbtyvoG4HUkSMb+KR0Nc8QsJq39:FhaXZj5qtyvESe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.7.9:1234

Targets

    • Target

      22684dfe0e32d464893d88964720d610N.exe

    • Size

      72KB

    • MD5

      22684dfe0e32d464893d88964720d610

    • SHA1

      49a8b2cd74681e59caeb05ddb138d59470662963

    • SHA256

      58d2fecddc8fa8ffdfb668ea3ee2e75796462010ac5a4f877638ff300bfc708d

    • SHA512

      341f7994c82d0449b3a63c3851dfef751f592837b3c7b80d987a61d003669b7598fafc9760b521db4f402a40a533691f860b0f10b44e0ca456e4d049e2540e4e

    • SSDEEP

      1536:IIOiNpGXZBZJDSTvbtyvoG4HUkSMb+KR0Nc8QsJq39:FhaXZj5qtyvESe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks