General

  • Target

    1485b1153f550ea76e667908720da9c4df55b4b8bb17c89a01e6df3bd601263fN

  • Size

    72KB

  • Sample

    240918-wpb83svepe

  • MD5

    ad927740799e7c4aef3c2a8e38c83650

  • SHA1

    c3c5dfae31c16b2e1e4e0f736fa087016529cb32

  • SHA256

    1485b1153f550ea76e667908720da9c4df55b4b8bb17c89a01e6df3bd601263f

  • SHA512

    20a10ac585d0813c3dd8295e27f6a8de0abc06a2cec1488d52f3817a5839b5fbb24b79fa8e5354d1ab0f25d2ba3f7816137ebcdd72940e31833d3a78b4ab2d6d

  • SSDEEP

    1536:IW4SyWJ7nASPFWkecwYEooDusBnPMb+KR0Nc8QsJq39:KWJnF8cHnoDxPe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.58.14.132:4183

Targets

    • Target

      1485b1153f550ea76e667908720da9c4df55b4b8bb17c89a01e6df3bd601263fN

    • Size

      72KB

    • MD5

      ad927740799e7c4aef3c2a8e38c83650

    • SHA1

      c3c5dfae31c16b2e1e4e0f736fa087016529cb32

    • SHA256

      1485b1153f550ea76e667908720da9c4df55b4b8bb17c89a01e6df3bd601263f

    • SHA512

      20a10ac585d0813c3dd8295e27f6a8de0abc06a2cec1488d52f3817a5839b5fbb24b79fa8e5354d1ab0f25d2ba3f7816137ebcdd72940e31833d3a78b4ab2d6d

    • SSDEEP

      1536:IW4SyWJ7nASPFWkecwYEooDusBnPMb+KR0Nc8QsJq39:KWJnF8cHnoDxPe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks