General

  • Target

    file.exe

  • Size

    45KB

  • Sample

    240920-q34ycszaqc

  • MD5

    16451c80f18ca7d30f2ef0760c725315

  • SHA1

    3b68f307a518f4992989cdef3c0792a5db9c0088

  • SHA256

    b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14

  • SHA512

    997792cec7104607152e258e8a3c2c924aa71755fe23b4535b9d3c13da295f56d7faa0b879483f638032a016a6523711383af99fab9718e681adbd9e66b88bbb

  • SSDEEP

    768:j/6eAy7Qt0SIyMFKwg9/nBqy0bDiDXSZVixElkg40eO7cQn7DeWq3:z6eAT0zyMtYg7XiDGVwElkg97cQeWq3

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

    • Target

      file.exe

    • Size

      45KB

    • MD5

      16451c80f18ca7d30f2ef0760c725315

    • SHA1

      3b68f307a518f4992989cdef3c0792a5db9c0088

    • SHA256

      b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14

    • SHA512

      997792cec7104607152e258e8a3c2c924aa71755fe23b4535b9d3c13da295f56d7faa0b879483f638032a016a6523711383af99fab9718e681adbd9e66b88bbb

    • SSDEEP

      768:j/6eAy7Qt0SIyMFKwg9/nBqy0bDiDXSZVixElkg40eO7cQn7DeWq3:z6eAT0zyMtYg7XiDGVwElkg97cQeWq3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks