General

  • Target

    a2f6803e6214a891929e2d18abf2743efcdb58481bb5fe8fce7b56eedc118742N

  • Size

    72KB

  • Sample

    240917-rbjnsaxanl

  • MD5

    651b08968a50ae4136fbd8c6e2fb52e0

  • SHA1

    2b9db5b9db6addc5b27ab3d5fbde7ea186833a7c

  • SHA256

    a2f6803e6214a891929e2d18abf2743efcdb58481bb5fe8fce7b56eedc118742

  • SHA512

    975fb7937564fc16a668995b384386ac88e08a693e4caf35f2ff03d5c5c83de44ef960f81013df6f245bbdcffbe85b3aae1ed4c0699fc8d0fe5bb573574ffb9a

  • SSDEEP

    1536:ITZyZgqjXnPDCvE/If48gudCkaMb+KR0Nc8QsJq39:+8gc/DCvEAgne0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

75.109.29.174:42362

Targets

    • Target

      a2f6803e6214a891929e2d18abf2743efcdb58481bb5fe8fce7b56eedc118742N

    • Size

      72KB

    • MD5

      651b08968a50ae4136fbd8c6e2fb52e0

    • SHA1

      2b9db5b9db6addc5b27ab3d5fbde7ea186833a7c

    • SHA256

      a2f6803e6214a891929e2d18abf2743efcdb58481bb5fe8fce7b56eedc118742

    • SHA512

      975fb7937564fc16a668995b384386ac88e08a693e4caf35f2ff03d5c5c83de44ef960f81013df6f245bbdcffbe85b3aae1ed4c0699fc8d0fe5bb573574ffb9a

    • SSDEEP

      1536:ITZyZgqjXnPDCvE/If48gudCkaMb+KR0Nc8QsJq39:+8gc/DCvEAgne0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks