General

  • Target

    65b0570f3a1fdb382124f063d698ea7e88717b7b2bc98f2d6b872451541108b2

  • Size

    38KB

  • Sample

    240918-zvxnratdlp

  • MD5

    4949f8e3c60f4c74c990349b580a5ac3

  • SHA1

    95471f2069c8183a28383f5789fe025d7b840330

  • SHA256

    65b0570f3a1fdb382124f063d698ea7e88717b7b2bc98f2d6b872451541108b2

  • SHA512

    d4a8e38e8ce59d20e7fda7ea07697521396c2610333f79959972d6c6ee9eadece179efe73ca0a707202bf77a8d9ef7f5684575c8ac7ec86044c4b270afc0421b

  • SSDEEP

    384:zSiSwvxjk+tz8tSosdUR/egp/SO0CZeKHXyknWzUg0jFUe+8sAPjq:zVxw+tdosdUR/DhZ93yknq5AJq

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.0.2.10:443/QCZ9i3I5cAEcjh2PemTorgY4WZ6cGX7vGe4jY-Uqvj9Qk8C6G-1MqrTnFijh292xH44jg6bKV41Dfr5RtGwUJ9eyRhfI8CbD_QX0DvO9yL4OoI1xNpshDqUkY8_yvrN7X6Z4o2X3x05Z9zZDnFP0sRxY9vEd5qM_lys_SNq9qDhpFSKcHdFgfEvuASdc35OQLtNktxmCUhSKJJ1xb8r61tf

Targets

    • Target

      65b0570f3a1fdb382124f063d698ea7e88717b7b2bc98f2d6b872451541108b2

    • Size

      38KB

    • MD5

      4949f8e3c60f4c74c990349b580a5ac3

    • SHA1

      95471f2069c8183a28383f5789fe025d7b840330

    • SHA256

      65b0570f3a1fdb382124f063d698ea7e88717b7b2bc98f2d6b872451541108b2

    • SHA512

      d4a8e38e8ce59d20e7fda7ea07697521396c2610333f79959972d6c6ee9eadece179efe73ca0a707202bf77a8d9ef7f5684575c8ac7ec86044c4b270afc0421b

    • SSDEEP

      384:zSiSwvxjk+tz8tSosdUR/egp/SO0CZeKHXyknWzUg0jFUe+8sAPjq:zVxw+tdosdUR/DhZ93yknq5AJq

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks