General

  • Target

    f506b80e90477b4a92dff08b151f9edf795a0647829cdf92e2680c782da716ba

  • Size

    38KB

  • Sample

    240918-zwrh5atanh

  • MD5

    11e087de003e73d5268b8fb58dcdd591

  • SHA1

    6ce4843283e8359a2db9a5442a044667ba74dbc1

  • SHA256

    f506b80e90477b4a92dff08b151f9edf795a0647829cdf92e2680c782da716ba

  • SHA512

    994f333bb81b2352042ad8b4eeea906fa873de3d402e9e187dbf78958e11eceade8466d7246741759991d8223b0f3a9166406913219e11347df577da1866044a

  • SSDEEP

    384:fe+86SiSwvxjk+tzC0OR/egp/SO0CZfosdOKHXyknWzOg0jFBt4/:/Vxw+tKR/DhZfosdN3yknqnA

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.0.2.10:443/QCZ9i3I5cAEcjh2PemTorgY4WZ6cGX7vGe4jY-Uqvj9Qk8C6G-1MqrTnFijh292xH44jg6bKV41Dfr5RtGwUJ9eyRhfI8CbD_QX0DvO9yL4OoI1xNpshDqUkY8_yvrN7X6Z4o2X3x05Z9zZDnFP0sRxY9vEd5qM_lys_SNq9qDhpFSKcHdFgfEvuASdc35OQLtNktxmCUhSKJJ1xb8r61tf

Targets

    • Target

      f506b80e90477b4a92dff08b151f9edf795a0647829cdf92e2680c782da716ba

    • Size

      38KB

    • MD5

      11e087de003e73d5268b8fb58dcdd591

    • SHA1

      6ce4843283e8359a2db9a5442a044667ba74dbc1

    • SHA256

      f506b80e90477b4a92dff08b151f9edf795a0647829cdf92e2680c782da716ba

    • SHA512

      994f333bb81b2352042ad8b4eeea906fa873de3d402e9e187dbf78958e11eceade8466d7246741759991d8223b0f3a9166406913219e11347df577da1866044a

    • SSDEEP

      384:fe+86SiSwvxjk+tzC0OR/egp/SO0CZfosdOKHXyknWzOg0jFBt4/:/Vxw+tKR/DhZfosdN3yknqnA

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks