General

  • Target

    62637e649e7a7ae21fad9349ae1bdef41c8524a28661b07ee237cee0e2a25d30N

  • Size

    72KB

  • Sample

    240921-d96pbatckf

  • MD5

    8feb5e4e38dab5e434081a7e7701ecc0

  • SHA1

    4333e20ccc5e1c0dac197bd35b255331196baea3

  • SHA256

    62637e649e7a7ae21fad9349ae1bdef41c8524a28661b07ee237cee0e2a25d30

  • SHA512

    adb608a106eb1c00ca8e1bc3f4f3be32771b71be125385cd390c65c9c64c1ea720bc627c55e59376cb081684b82ac84f1c824a353eda1fcb7407b547a40f6db4

  • SSDEEP

    1536:Ih8KCkV6JP5vfIL/fMreCMQNv3IAQvUfCfcMb+KR0Nc8QsJq39:zKCu6JFfqfMy30vHQsqke0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.90:4444

Targets

    • Target

      62637e649e7a7ae21fad9349ae1bdef41c8524a28661b07ee237cee0e2a25d30N

    • Size

      72KB

    • MD5

      8feb5e4e38dab5e434081a7e7701ecc0

    • SHA1

      4333e20ccc5e1c0dac197bd35b255331196baea3

    • SHA256

      62637e649e7a7ae21fad9349ae1bdef41c8524a28661b07ee237cee0e2a25d30

    • SHA512

      adb608a106eb1c00ca8e1bc3f4f3be32771b71be125385cd390c65c9c64c1ea720bc627c55e59376cb081684b82ac84f1c824a353eda1fcb7407b547a40f6db4

    • SSDEEP

      1536:Ih8KCkV6JP5vfIL/fMreCMQNv3IAQvUfCfcMb+KR0Nc8QsJq39:zKCu6JFfqfMy30vHQsqke0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks