General

  • Target

    dd2e7a2770ca2f6fe586ae2ce2ec34de.virus

  • Size

    124KB

  • Sample

    240917-j2kprssgqm

  • MD5

    dd2e7a2770ca2f6fe586ae2ce2ec34de

  • SHA1

    3e17f114f64c0ae2d3fa2063592a2ae36d0a9bfd

  • SHA256

    241763427629b22a8603a27e35ab78c8895a06887fc1d32e3af7037a2da1b99d

  • SHA512

    0139d63e0208f8605e294dcb619f96e2cc0db2f59ff3d802b5f33cb2beca9804f46dad21809fe3be7d0a8c6995452f24f51bacb0567d068c6ef6b84060ad1840

  • SSDEEP

    1536:I166BLt2fb8J3LkEnxnQi5RCM1kVlwDeMb+KR0Nc8QsJq31:s3BLtcbm3LkEnxdbCM1kuee0Nc8QsC1

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp_dns

C2

windowshealth.store:8887

Targets

    • Target

      dd2e7a2770ca2f6fe586ae2ce2ec34de.virus

    • Size

      124KB

    • MD5

      dd2e7a2770ca2f6fe586ae2ce2ec34de

    • SHA1

      3e17f114f64c0ae2d3fa2063592a2ae36d0a9bfd

    • SHA256

      241763427629b22a8603a27e35ab78c8895a06887fc1d32e3af7037a2da1b99d

    • SHA512

      0139d63e0208f8605e294dcb619f96e2cc0db2f59ff3d802b5f33cb2beca9804f46dad21809fe3be7d0a8c6995452f24f51bacb0567d068c6ef6b84060ad1840

    • SSDEEP

      1536:I166BLt2fb8J3LkEnxnQi5RCM1kVlwDeMb+KR0Nc8QsJq31:s3BLtcbm3LkEnxdbCM1kuee0Nc8QsC1

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks