General

  • Target

    e8d4c75281521b67ae99f13aa9fec63f5e9229fe01505f31e85fe8e1af09606fN

  • Size

    72KB

  • Sample

    240920-wl7ktazblc

  • MD5

    5236fa30c4f7575a5717803a4e9d5d30

  • SHA1

    7e654807b166a21039219c47309381dca4c95390

  • SHA256

    e8d4c75281521b67ae99f13aa9fec63f5e9229fe01505f31e85fe8e1af09606f

  • SHA512

    0b0ac351376cae2d996b4c87d77140a2c2428859a45a8463a409c7734c5cae6bcefd9e8b9582cb3cd705844ee86580cd1c0a5253de67dc2e100cb9344c532717

  • SSDEEP

    1536:IQ9I/tusFygidgMO9yQBN/O41yKyxMb+KR0Nc8QsJq39:F+u5wg8O4oxe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

114.71.52.44:40746

Targets

    • Target

      e8d4c75281521b67ae99f13aa9fec63f5e9229fe01505f31e85fe8e1af09606fN

    • Size

      72KB

    • MD5

      5236fa30c4f7575a5717803a4e9d5d30

    • SHA1

      7e654807b166a21039219c47309381dca4c95390

    • SHA256

      e8d4c75281521b67ae99f13aa9fec63f5e9229fe01505f31e85fe8e1af09606f

    • SHA512

      0b0ac351376cae2d996b4c87d77140a2c2428859a45a8463a409c7734c5cae6bcefd9e8b9582cb3cd705844ee86580cd1c0a5253de67dc2e100cb9344c532717

    • SSDEEP

      1536:IQ9I/tusFygidgMO9yQBN/O41yKyxMb+KR0Nc8QsJq39:F+u5wg8O4oxe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks