General

  • Target

    5d360ba26f24c3f697b65f4c5e3882f319b18bead4dcf698e8543719e2d17fa5

  • Size

    72KB

  • Sample

    240918-11ldcawckm

  • MD5

    c065f46f7ed01ac6db0a4f0be525983b

  • SHA1

    6070bb80056d5b18dd786579f38e7f4b65de994b

  • SHA256

    5d360ba26f24c3f697b65f4c5e3882f319b18bead4dcf698e8543719e2d17fa5

  • SHA512

    5a559a02917f745deec94ab856e8fb5377f104514db45a0398dad1bacbd9136515a29d8a94fb279892956b29d9915c397b9f8a8bb7f7fca493642893b9448b2a

  • SSDEEP

    1536:ISEhh0EqRbsybKLFWYl+VC3zEmU58Mb+KR0Nc8QsJq39:dEhhBqRguGR3m58e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

215.238.214.200:32861

Targets

    • Target

      5d360ba26f24c3f697b65f4c5e3882f319b18bead4dcf698e8543719e2d17fa5

    • Size

      72KB

    • MD5

      c065f46f7ed01ac6db0a4f0be525983b

    • SHA1

      6070bb80056d5b18dd786579f38e7f4b65de994b

    • SHA256

      5d360ba26f24c3f697b65f4c5e3882f319b18bead4dcf698e8543719e2d17fa5

    • SHA512

      5a559a02917f745deec94ab856e8fb5377f104514db45a0398dad1bacbd9136515a29d8a94fb279892956b29d9915c397b9f8a8bb7f7fca493642893b9448b2a

    • SSDEEP

      1536:ISEhh0EqRbsybKLFWYl+VC3zEmU58Mb+KR0Nc8QsJq39:dEhhBqRguGR3m58e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks