General

  • Target

    eefde784508bfef1d241f05cff039a5a

  • Size

    72KB

  • Sample

    240916-xzz9bsvfqe

  • MD5

    eefde784508bfef1d241f05cff039a5a

  • SHA1

    ff5cd5866b21acb7e9b762f78f8ba3cf9f76bed6

  • SHA256

    859b11eb511fc8a39390f5efbcf3206913c8b79c5a4d1c224de23c12a7d69b4c

  • SHA512

    fcfb18f723595b6b7a7bdfcdfd39e1bfd65d1e4891d03450b24dcaef4102a493238ea42f13422e46b1eb445ae6034ae4e4b6e4487b9c2554fff23f97a8cb664a

  • SSDEEP

    1536:IXUUHTQ4BC3R4eBuQOkye81JjwTeMb+KR0Nc8QsJq39:LCTVM3R4Kuky3Jj/e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.151:4444

Targets

    • Target

      eefde784508bfef1d241f05cff039a5a

    • Size

      72KB

    • MD5

      eefde784508bfef1d241f05cff039a5a

    • SHA1

      ff5cd5866b21acb7e9b762f78f8ba3cf9f76bed6

    • SHA256

      859b11eb511fc8a39390f5efbcf3206913c8b79c5a4d1c224de23c12a7d69b4c

    • SHA512

      fcfb18f723595b6b7a7bdfcdfd39e1bfd65d1e4891d03450b24dcaef4102a493238ea42f13422e46b1eb445ae6034ae4e4b6e4487b9c2554fff23f97a8cb664a

    • SSDEEP

      1536:IXUUHTQ4BC3R4eBuQOkye81JjwTeMb+KR0Nc8QsJq39:LCTVM3R4Kuky3Jj/e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks