General

  • Target

    c40d86dc1a55b62f6f6175437f013715a87b68dc3510d82a40dd993f550ad511N

  • Size

    72KB

  • Sample

    240918-3nlvfsyhpc

  • MD5

    59710ee41ef818a0b82348a68a6c0b60

  • SHA1

    01c7d0ba89c662f90e679a7a39b3ed0d5e59a7d2

  • SHA256

    c40d86dc1a55b62f6f6175437f013715a87b68dc3510d82a40dd993f550ad511

  • SHA512

    e169e5ecb57aba355f52e9b13c6e90e4d9c786638e2ec5a8dc61088657bada535c07baf6e6629ac095608217d9ade7b8c0c8ddbb44e1838eeccc61cefd1c2e91

  • SSDEEP

    1536:IR75B3D+4IXoRP8+aZhI20fHSzhR/hbEZOx+uYMb+KR0Nc8QsJq39:qhD+4IXoRCZGfHqR/hbEZOoe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.140.33.113:10451

Targets

    • Target

      c40d86dc1a55b62f6f6175437f013715a87b68dc3510d82a40dd993f550ad511N

    • Size

      72KB

    • MD5

      59710ee41ef818a0b82348a68a6c0b60

    • SHA1

      01c7d0ba89c662f90e679a7a39b3ed0d5e59a7d2

    • SHA256

      c40d86dc1a55b62f6f6175437f013715a87b68dc3510d82a40dd993f550ad511

    • SHA512

      e169e5ecb57aba355f52e9b13c6e90e4d9c786638e2ec5a8dc61088657bada535c07baf6e6629ac095608217d9ade7b8c0c8ddbb44e1838eeccc61cefd1c2e91

    • SSDEEP

      1536:IR75B3D+4IXoRP8+aZhI20fHSzhR/hbEZOx+uYMb+KR0Nc8QsJq39:qhD+4IXoRCZGfHqR/hbEZOoe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks