General

  • Target

    548512f33c844c1e0751be1b5ac138d38a58f22f984ccf636152c3228fc9b645

  • Size

    38KB

  • Sample

    240918-zt3tdatcrj

  • MD5

    1cf374f308f3f58429806470cb513b7a

  • SHA1

    f7396c22175e4df3b666713aa40c65ecabd48981

  • SHA256

    548512f33c844c1e0751be1b5ac138d38a58f22f984ccf636152c3228fc9b645

  • SHA512

    0293aba4f71bb769f2c15ea7b2c9c6000f60a95d03d6218eb844c998a02694ffdeead1b494a50de23e9099d9fcb9148b2cda429728334162dd969d3fa3e0fd4f

  • SSDEEP

    384:sSiSwvxjk+t2YrhR/egp/SOKZ5o42jKHXyknWzOg0j+ctB:sVxw+tDNR/DKZ5o4H3yknqnb

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.0.2.10:443/QCZ9i3I5cAEcjh2PemTorgY4WZ6cGX7vGe4jY-Uqvj9Qk8C6G-1MqrTnFijh292xH44jg6bKV41Dfr5RtGwUJ9eyRhfI8CbD_QX0DvO9yL4OoI1xNpshDqUkY8_yvrN7X6Z4o2X3x05Z9zZDnFP0sRxY9vEd5qM_lys_SNq9qDhpFSKcHdFgfEvuASdc35OQLtNktxmCUhSKJJ1xb8r61tf

Targets

    • Target

      548512f33c844c1e0751be1b5ac138d38a58f22f984ccf636152c3228fc9b645

    • Size

      38KB

    • MD5

      1cf374f308f3f58429806470cb513b7a

    • SHA1

      f7396c22175e4df3b666713aa40c65ecabd48981

    • SHA256

      548512f33c844c1e0751be1b5ac138d38a58f22f984ccf636152c3228fc9b645

    • SHA512

      0293aba4f71bb769f2c15ea7b2c9c6000f60a95d03d6218eb844c998a02694ffdeead1b494a50de23e9099d9fcb9148b2cda429728334162dd969d3fa3e0fd4f

    • SSDEEP

      384:sSiSwvxjk+t2YrhR/egp/SOKZ5o42jKHXyknWzOg0j+ctB:sVxw+tDNR/DKZ5o4H3yknqnb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks