General

  • Target

    58b557bb2e3cf897ea343d776aeb0924b7abbaac761c9aa299af11087a8c5eb9

  • Size

    72KB

  • Sample

    240916-z8jn2szgpj

  • MD5

    6fcd344ab5cb2f9e1b574f697cc99bcd

  • SHA1

    528e9a769e7bba03529494a0b81864b35270e837

  • SHA256

    58b557bb2e3cf897ea343d776aeb0924b7abbaac761c9aa299af11087a8c5eb9

  • SHA512

    6582897b98e56bdea27801a9691037e6dfe65ddec639eafd0d4dd91fb6d32ad6b1f2c13fe10e361ff1a9d8e80201ae68529292d9ad5a3a0623b05e176d2dcd49

  • SSDEEP

    1536:I/vIa9+Jigbf2xZZAqRbmUGPaBMb+KR0Nc8QsJq39:KIaStf2eNUe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.45.248:443

Targets

    • Target

      58b557bb2e3cf897ea343d776aeb0924b7abbaac761c9aa299af11087a8c5eb9

    • Size

      72KB

    • MD5

      6fcd344ab5cb2f9e1b574f697cc99bcd

    • SHA1

      528e9a769e7bba03529494a0b81864b35270e837

    • SHA256

      58b557bb2e3cf897ea343d776aeb0924b7abbaac761c9aa299af11087a8c5eb9

    • SHA512

      6582897b98e56bdea27801a9691037e6dfe65ddec639eafd0d4dd91fb6d32ad6b1f2c13fe10e361ff1a9d8e80201ae68529292d9ad5a3a0623b05e176d2dcd49

    • SSDEEP

      1536:I/vIa9+Jigbf2xZZAqRbmUGPaBMb+KR0Nc8QsJq39:KIaStf2eNUe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks