Resubmissions

15-09-2024 07:06

240915-hxdvzs1fna 10

15-09-2024 07:00

240915-hsr7ta1hkm 10

General

  • Target

    payload.exe

  • Size

    72KB

  • Sample

    240915-hxdvzs1fna

  • MD5

    4911f5b6c641dfe88ab713c41b587e96

  • SHA1

    b4561cb5074287f78a0a6c184f612c63aa6066eb

  • SHA256

    76b04644338423c6ef1e5f584592d068f06ea88cfbc70c1c357cb716ddb82cf1

  • SHA512

    ae4297d09eb77d5c69ffa68912176a4544cf241bcd918c8e81d24cea1aea2360d255b913de550bb2886dbf7517a1e888fb4f301aaa47cd17b8c21ccd845ff9e3

  • SSDEEP

    1536:IAn2lP0X4WBs6V2hsYrpIMUEQbjtQMb+KR0Nc8QsJq39:ln4MX4C32RKMUQe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.120:3344

Targets

    • Target

      payload.exe

    • Size

      72KB

    • MD5

      4911f5b6c641dfe88ab713c41b587e96

    • SHA1

      b4561cb5074287f78a0a6c184f612c63aa6066eb

    • SHA256

      76b04644338423c6ef1e5f584592d068f06ea88cfbc70c1c357cb716ddb82cf1

    • SHA512

      ae4297d09eb77d5c69ffa68912176a4544cf241bcd918c8e81d24cea1aea2360d255b913de550bb2886dbf7517a1e888fb4f301aaa47cd17b8c21ccd845ff9e3

    • SSDEEP

      1536:IAn2lP0X4WBs6V2hsYrpIMUEQbjtQMb+KR0Nc8QsJq39:ln4MX4C32RKMUQe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks