General

  • Target

    1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308

  • Size

    72KB

  • Sample

    240915-t1htwstbqp

  • MD5

    b11efd812f8fd94f3385b3ed5dc525b7

  • SHA1

    a1b852d4b67dda370392579c1ecb571deb5884e0

  • SHA256

    1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308

  • SHA512

    a90e55e02a5e712356b31b48eb98b2fd551132d4d797db37358c7bf498e36ebaa4fd1c11cfbd5f0ec81284808cf4766fdfb499cf3ae74f1ef1043cadac8092a7

  • SSDEEP

    1536:IepVuWvRp+yTRMGNvgybv6lTKZ/3gw2eBMb+KR0Nc8QsJq39:Ppp+yaSvg+ooowde0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.1:8080

Targets

    • Target

      1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308

    • Size

      72KB

    • MD5

      b11efd812f8fd94f3385b3ed5dc525b7

    • SHA1

      a1b852d4b67dda370392579c1ecb571deb5884e0

    • SHA256

      1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308

    • SHA512

      a90e55e02a5e712356b31b48eb98b2fd551132d4d797db37358c7bf498e36ebaa4fd1c11cfbd5f0ec81284808cf4766fdfb499cf3ae74f1ef1043cadac8092a7

    • SSDEEP

      1536:IepVuWvRp+yTRMGNvgybv6lTKZ/3gw2eBMb+KR0Nc8QsJq39:Ppp+yaSvg+ooowde0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks