General

  • Target

    Trojan.Win32.Meterpreter.RPZ.MTB-69cff855772fffa1207444ca7bcf9fe259d757d67baae4c24d028525c74b3b73N

  • Size

    5KB

  • Sample

    240915-x7eycszdjm

  • MD5

    7db52ce24852f75fcf0f23e47c2b5850

  • SHA1

    66332917a7e8b7d2b93548a5fd6b96d474d80137

  • SHA256

    69cff855772fffa1207444ca7bcf9fe259d757d67baae4c24d028525c74b3b73

  • SHA512

    ad420c312e43d0e6202e63395192560db651b2988b3c4ec3058054189fa13e5bfe9e5c9baa10a1841e971c0ecfb0eedacb9620ceeb3b3a1e3a5d73c7edfffa73

  • SSDEEP

    96:13u+KINu62Gnn9asTU9ig+aGs7YdDjSY+Caw/NXs5ApAJZa6JhduV0:1e+TN52+Ui+GsgaYp0qyaYhduV0

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

5.180.45.105:2006

Targets

    • Target

      Trojan.Win32.Meterpreter.RPZ.MTB-69cff855772fffa1207444ca7bcf9fe259d757d67baae4c24d028525c74b3b73N

    • Size

      5KB

    • MD5

      7db52ce24852f75fcf0f23e47c2b5850

    • SHA1

      66332917a7e8b7d2b93548a5fd6b96d474d80137

    • SHA256

      69cff855772fffa1207444ca7bcf9fe259d757d67baae4c24d028525c74b3b73

    • SHA512

      ad420c312e43d0e6202e63395192560db651b2988b3c4ec3058054189fa13e5bfe9e5c9baa10a1841e971c0ecfb0eedacb9620ceeb3b3a1e3a5d73c7edfffa73

    • SSDEEP

      96:13u+KINu62Gnn9asTU9ig+aGs7YdDjSY+Caw/NXs5ApAJZa6JhduV0:1e+TN52+Ui+GsgaYp0qyaYhduV0

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks