General

  • Target

    f679fb57e7ff07768c636aef0c5a32622aaf2a588670ded2d57a147b16bcabc8N

  • Size

    72KB

  • Sample

    240918-w798tsxckl

  • MD5

    f09d692e065a4573f9f7176b01f83e90

  • SHA1

    26bedbfe91dcc7ccc045e4fc8ea5220745817fbd

  • SHA256

    f679fb57e7ff07768c636aef0c5a32622aaf2a588670ded2d57a147b16bcabc8

  • SHA512

    093519993b185c2e0540d7bd23beeb2bb186421a22412fa870825cf6ad70075da366580c7fb4e84bd249a74043b8c1b7a92c3878f942d066dcdcdf5199f29130

  • SSDEEP

    1536:ITYvCT6ibq+s97Vk+sI2h13qbMb+KR0Nc8QsJq39:UYcq+sNGTI2F0e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

254.218.64.255:39432

Targets

    • Target

      f679fb57e7ff07768c636aef0c5a32622aaf2a588670ded2d57a147b16bcabc8N

    • Size

      72KB

    • MD5

      f09d692e065a4573f9f7176b01f83e90

    • SHA1

      26bedbfe91dcc7ccc045e4fc8ea5220745817fbd

    • SHA256

      f679fb57e7ff07768c636aef0c5a32622aaf2a588670ded2d57a147b16bcabc8

    • SHA512

      093519993b185c2e0540d7bd23beeb2bb186421a22412fa870825cf6ad70075da366580c7fb4e84bd249a74043b8c1b7a92c3878f942d066dcdcdf5199f29130

    • SSDEEP

      1536:ITYvCT6ibq+s97Vk+sI2h13qbMb+KR0Nc8QsJq39:UYcq+sNGTI2F0e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks