General

  • Target

    aa37f3cff0ae80cd462bfffc2ff963b543c4e5f451c8b3f885cb953fc51342bfN

  • Size

    72KB

  • Sample

    240917-xv5cgszdnd

  • MD5

    a293bfa4e747aa6645a9d15924a5ace0

  • SHA1

    7023884fc9d743f7acf6333932121d8c7ca5d70e

  • SHA256

    aa37f3cff0ae80cd462bfffc2ff963b543c4e5f451c8b3f885cb953fc51342bf

  • SHA512

    80e969927a4950e39ef5a3e8b3af9bf9977bebeb1fe50ce4688112fc9424766b9414cc883b7d00433870127c001f0da89331a6f6c5e112d6403f18db8f8df452

  • SSDEEP

    1536:ILHvYbBDUu4ycTHW6P4Mu1M77RZ1G24kCzMb+KR0Nc8QsJq39:Y2RCycgJ1M77RZ1vGze0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

254.239.160.183:48273

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      aa37f3cff0ae80cd462bfffc2ff963b543c4e5f451c8b3f885cb953fc51342bfN

    • Size

      72KB

    • MD5

      a293bfa4e747aa6645a9d15924a5ace0

    • SHA1

      7023884fc9d743f7acf6333932121d8c7ca5d70e

    • SHA256

      aa37f3cff0ae80cd462bfffc2ff963b543c4e5f451c8b3f885cb953fc51342bf

    • SHA512

      80e969927a4950e39ef5a3e8b3af9bf9977bebeb1fe50ce4688112fc9424766b9414cc883b7d00433870127c001f0da89331a6f6c5e112d6403f18db8f8df452

    • SSDEEP

      1536:ILHvYbBDUu4ycTHW6P4Mu1M77RZ1G24kCzMb+KR0Nc8QsJq39:Y2RCycgJ1M77RZ1vGze0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks