General

  • Target

    c2a35b7993e4ea329ad32b7652f18c1ede64738a46be5030a0abe4ffec7362edN

  • Size

    72KB

  • Sample

    240920-ejyfpaxhjl

  • MD5

    75ddff20d4bb8052bc8df97bb85fa350

  • SHA1

    6539b71f97d5a22acb1eec71eda0429666d3d9e0

  • SHA256

    c2a35b7993e4ea329ad32b7652f18c1ede64738a46be5030a0abe4ffec7362ed

  • SHA512

    e79759a91a7063700f55e789523cbc6321e2a1234941311cebb7ad9855ce91b7bd9bee82a8bc4df65d8b82c2e84626aa16be1280fcf9eb04bcd9fd4d1de5fcf0

  • SSDEEP

    1536:Ihy/DdfE/nGHCLufI7As1H7rv0Vb1rasVoTMb+KR0Nc8QsJq39:kwfpCMCASEjrdme0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

157.3.216.91:9119

Targets

    • Target

      c2a35b7993e4ea329ad32b7652f18c1ede64738a46be5030a0abe4ffec7362edN

    • Size

      72KB

    • MD5

      75ddff20d4bb8052bc8df97bb85fa350

    • SHA1

      6539b71f97d5a22acb1eec71eda0429666d3d9e0

    • SHA256

      c2a35b7993e4ea329ad32b7652f18c1ede64738a46be5030a0abe4ffec7362ed

    • SHA512

      e79759a91a7063700f55e789523cbc6321e2a1234941311cebb7ad9855ce91b7bd9bee82a8bc4df65d8b82c2e84626aa16be1280fcf9eb04bcd9fd4d1de5fcf0

    • SSDEEP

      1536:Ihy/DdfE/nGHCLufI7As1H7rv0Vb1rasVoTMb+KR0Nc8QsJq39:kwfpCMCASEjrdme0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks