General

  • Target

    15ec014b9481ae998e2e98d8f12da4f0N

  • Size

    72KB

  • Sample

    240915-ctwcza1brl

  • MD5

    15ec014b9481ae998e2e98d8f12da4f0

  • SHA1

    abc56cb334e4b3d8d9864761f8bd9b91f594a523

  • SHA256

    76455610014ea04e97198bdafa9bbababd7380c34d5753535b1a2ad8c8722c02

  • SHA512

    b2e8392195258f9cb3727bb8e08f1d6e070972c3999f930b58f86a65655290d3d889ff97261f883454e2cbbf71c7c1bea65b8789189160d8902b2c03a7e3d56d

  • SSDEEP

    1536:IVUwJvEuniHq7wNAUM4j2rx0vcZMb+KR0Nc8QsJq39:yvXiK7A2e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.34:4444

Targets

    • Target

      15ec014b9481ae998e2e98d8f12da4f0N

    • Size

      72KB

    • MD5

      15ec014b9481ae998e2e98d8f12da4f0

    • SHA1

      abc56cb334e4b3d8d9864761f8bd9b91f594a523

    • SHA256

      76455610014ea04e97198bdafa9bbababd7380c34d5753535b1a2ad8c8722c02

    • SHA512

      b2e8392195258f9cb3727bb8e08f1d6e070972c3999f930b58f86a65655290d3d889ff97261f883454e2cbbf71c7c1bea65b8789189160d8902b2c03a7e3d56d

    • SSDEEP

      1536:IVUwJvEuniHq7wNAUM4j2rx0vcZMb+KR0Nc8QsJq39:yvXiK7A2e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks