General

  • Target

    fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493N

  • Size

    72KB

  • Sample

    240918-x9fmnszaka

  • MD5

    b6127eb563e60bd9e99303b6d7f378f0

  • SHA1

    634eb01322ee476bffc0de5ea72c2572f4f944f5

  • SHA256

    fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493

  • SHA512

    9306535250484c7daf482b1891b086c92c755eadfd28282f0f940848446fe06852fbb84243fb77e6c13580718bf797604174f2d083700a589593d916068dc1b2

  • SSDEEP

    1536:IURHnjgb/dr5MIOHAE2yVh7W2Mb+KR0Nc8QsJq39:Nn0LhGIqMyTC2e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.185.221.22:46209

Targets

    • Target

      fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493N

    • Size

      72KB

    • MD5

      b6127eb563e60bd9e99303b6d7f378f0

    • SHA1

      634eb01322ee476bffc0de5ea72c2572f4f944f5

    • SHA256

      fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493

    • SHA512

      9306535250484c7daf482b1891b086c92c755eadfd28282f0f940848446fe06852fbb84243fb77e6c13580718bf797604174f2d083700a589593d916068dc1b2

    • SSDEEP

      1536:IURHnjgb/dr5MIOHAE2yVh7W2Mb+KR0Nc8QsJq39:Nn0LhGIqMyTC2e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks