General

  • Target

    b2d322a2b85865184c47ba1ffac932ecd8bd5477664798f5466384603bcb87a5N

  • Size

    72KB

  • Sample

    240917-rcg7cawgkc

  • MD5

    a6981304207738bea1cd0734f8481c50

  • SHA1

    86f788efad2ed5e3fbadf73ece391629a47fc34c

  • SHA256

    b2d322a2b85865184c47ba1ffac932ecd8bd5477664798f5466384603bcb87a5

  • SHA512

    fc754ef1726d5d951e1d93038a2dfb1e9031f4b070e1859e76992bbefc22e4bb3364bf0d1be58d110692b4593011a80f6a1dedd5ea9c7b255899fbdaa66cf983

  • SSDEEP

    1536:Ic4Qt2baC+fLJq8XA0H6oDL/rJv5KIZP/kKMb+KR0Nc8QsJq39:V46HCcNrXAu6AL/rh4kPMKe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

11.50.235.235:20187

Targets

    • Target

      b2d322a2b85865184c47ba1ffac932ecd8bd5477664798f5466384603bcb87a5N

    • Size

      72KB

    • MD5

      a6981304207738bea1cd0734f8481c50

    • SHA1

      86f788efad2ed5e3fbadf73ece391629a47fc34c

    • SHA256

      b2d322a2b85865184c47ba1ffac932ecd8bd5477664798f5466384603bcb87a5

    • SHA512

      fc754ef1726d5d951e1d93038a2dfb1e9031f4b070e1859e76992bbefc22e4bb3364bf0d1be58d110692b4593011a80f6a1dedd5ea9c7b255899fbdaa66cf983

    • SSDEEP

      1536:Ic4Qt2baC+fLJq8XA0H6oDL/rJv5KIZP/kKMb+KR0Nc8QsJq39:V46HCcNrXAu6AL/rh4kPMKe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks