General

  • Target

    a665e7df7d2773e00307c95fb2b4081ee6feac3849424dd7bd1880f22f4553caN

  • Size

    72KB

  • Sample

    240919-vvl5ss1ckk

  • MD5

    7759e3fa754af47d809205c1dee9f1a0

  • SHA1

    58ffc5bca07936699010d6f4c32c3386f157e46f

  • SHA256

    a665e7df7d2773e00307c95fb2b4081ee6feac3849424dd7bd1880f22f4553ca

  • SHA512

    99083dd8663ce60f7a7f6dd47a5a36bb3e81945cc69f86a4d433fef637654d6538066b0d4847db060fd9de22a8da90ec997560f821066856d6633b7845c0056b

  • SSDEEP

    1536:INvKwTXW9isDRSCixXkyBMb+KR0Nc8QsJq39:AvKwYlkXkae0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

195.8.142.71:53317

Targets

    • Target

      a665e7df7d2773e00307c95fb2b4081ee6feac3849424dd7bd1880f22f4553caN

    • Size

      72KB

    • MD5

      7759e3fa754af47d809205c1dee9f1a0

    • SHA1

      58ffc5bca07936699010d6f4c32c3386f157e46f

    • SHA256

      a665e7df7d2773e00307c95fb2b4081ee6feac3849424dd7bd1880f22f4553ca

    • SHA512

      99083dd8663ce60f7a7f6dd47a5a36bb3e81945cc69f86a4d433fef637654d6538066b0d4847db060fd9de22a8da90ec997560f821066856d6633b7845c0056b

    • SSDEEP

      1536:INvKwTXW9isDRSCixXkyBMb+KR0Nc8QsJq39:AvKwYlkXkae0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks