General

  • Target

    3d095ad534b97e2ff6ff37c5436f25f9e4c207549423344f5e14f307090ea76c

  • Size

    72KB

  • Sample

    240913-1vr9ps1hqd

  • MD5

    7550bc9d2c529d619ed818bcda95ea8a

  • SHA1

    5b7397f42f150e8ec578aeae3143719a7abe6787

  • SHA256

    3d095ad534b97e2ff6ff37c5436f25f9e4c207549423344f5e14f307090ea76c

  • SHA512

    345a4b4c8d62df7dde8405aef168bccc35af6a730f8d92d413bc49e970b487155650f285652a898ad08e4e84b7df032599f7183d9b2cda16bd94c696edf42f23

  • SSDEEP

    768:LI+1o9rp7NvJ+SfgYPtYTF5gvLpQoZW6ZjxOb:LI+a9F7NvJ+SVaTF5aFQoZW6hx

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.45.210:443/vTJnmWa7eOVXAVYAMeLi6gsjWtaHFoJfzCFbNHM7VIHezv6GJQq9rXDeuC4WjDI0Bey4I-zqqaJE5yVnl-HLo9s4Nljrt-fyGYztngmXyvkyfHrY6AtxcQzaHJgJRqAz5B0bEFG3-LxEBOyhO6a9WFauq8j52vB4gLewjPRp58z1YHMvd9-mghGjGjFmkqfztnWknx

Targets

    • Target

      3d095ad534b97e2ff6ff37c5436f25f9e4c207549423344f5e14f307090ea76c

    • Size

      72KB

    • MD5

      7550bc9d2c529d619ed818bcda95ea8a

    • SHA1

      5b7397f42f150e8ec578aeae3143719a7abe6787

    • SHA256

      3d095ad534b97e2ff6ff37c5436f25f9e4c207549423344f5e14f307090ea76c

    • SHA512

      345a4b4c8d62df7dde8405aef168bccc35af6a730f8d92d413bc49e970b487155650f285652a898ad08e4e84b7df032599f7183d9b2cda16bd94c696edf42f23

    • SSDEEP

      768:LI+1o9rp7NvJ+SfgYPtYTF5gvLpQoZW6ZjxOb:LI+a9F7NvJ+SVaTF5aFQoZW6hx

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks