General

  • Target

    6855eac916f6823962228a6f03f14f8c9802a02355e237191a382a02e327d856

  • Size

    150KB

  • Sample

    240913-kwyj4svgne

  • MD5

    ddc3baa320b95f67e7f0ad3acae54e9a

  • SHA1

    a78818c46a6adccfe071e9c7458ffa06e668e425

  • SHA256

    6855eac916f6823962228a6f03f14f8c9802a02355e237191a382a02e327d856

  • SHA512

    46979c2a153012ecf3dcab06d216586694b610a50a3d0880dc57cc535c3014d60b6a84cb249b53c87bc21c2908622b3cf116dbed00e32243cdeaa27417491c59

  • SSDEEP

    3072:i4TuGM5ttTgIo3gRZax1SfyBlHwOa1NmPRkn6wCw:iMuGM5zUMvyBlsNQRkn6wp

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.72.182:666

Targets

    • Target

      6855eac916f6823962228a6f03f14f8c9802a02355e237191a382a02e327d856

    • Size

      150KB

    • MD5

      ddc3baa320b95f67e7f0ad3acae54e9a

    • SHA1

      a78818c46a6adccfe071e9c7458ffa06e668e425

    • SHA256

      6855eac916f6823962228a6f03f14f8c9802a02355e237191a382a02e327d856

    • SHA512

      46979c2a153012ecf3dcab06d216586694b610a50a3d0880dc57cc535c3014d60b6a84cb249b53c87bc21c2908622b3cf116dbed00e32243cdeaa27417491c59

    • SSDEEP

      3072:i4TuGM5ttTgIo3gRZax1SfyBlHwOa1NmPRkn6wCw:iMuGM5zUMvyBlsNQRkn6wp

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks