General

  • Target

    reverse.ps1

  • Size

    7KB

  • Sample

    240917-bw6q2szanp

  • MD5

    0059ed26abaa29bbd8a4d89cbbe5fbc0

  • SHA1

    3d351c09f761c81477f3105ef6a379644eacb460

  • SHA256

    31afa53f3811ef413e20797361d21233d9f81841dfa499aeb04731ec3d6ef119

  • SHA512

    a02146a44a42a225eb9bf9b07f8b3ecef600890e2ad8d7b245296e6d23531e254e32c3d25d758ad73764f38db8f554c1d23b609ca90119e997edfb68a5d1922e

  • SSDEEP

    24:eFGStrJ9u0/6QoZnZdkBQAVv1kgKLqWRIeNDMSCvOXpmB:is07opkBQY+g2WSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.119:9001

Targets

    • Target

      reverse.ps1

    • Size

      7KB

    • MD5

      0059ed26abaa29bbd8a4d89cbbe5fbc0

    • SHA1

      3d351c09f761c81477f3105ef6a379644eacb460

    • SHA256

      31afa53f3811ef413e20797361d21233d9f81841dfa499aeb04731ec3d6ef119

    • SHA512

      a02146a44a42a225eb9bf9b07f8b3ecef600890e2ad8d7b245296e6d23531e254e32c3d25d758ad73764f38db8f554c1d23b609ca90119e997edfb68a5d1922e

    • SSDEEP

      24:eFGStrJ9u0/6QoZnZdkBQAVv1kgKLqWRIeNDMSCvOXpmB:is07opkBQY+g2WSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks