General

  • Target

    fc7985096c1deb6be04ef895133fc4a8b5f46bbf1e0769f09f68dae0d5ed49f7N

  • Size

    73KB

  • Sample

    240921-mfa5zsxdrq

  • MD5

    288959003ff898419c78a449c197c7b0

  • SHA1

    c3b38f9ee62ba701d0d1ea2d4056b4102e5c9d94

  • SHA256

    fc7985096c1deb6be04ef895133fc4a8b5f46bbf1e0769f09f68dae0d5ed49f7

  • SHA512

    1412bc113110a129d93be387fa4fb7f5e935258040db808c2e5f1373f703c1fa0e232476d8780803d32c14637b14aa07894117afbb83e527b44ff3e9c106034f

  • SSDEEP

    1536:IrDkjb1Y4LCdeO70rGFxngRBAMb+KR0Nc8QsJq3D1:ZtmeO70rGFWRBAe0Nc8QsCR

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.140.84:445

Targets

    • Target

      fc7985096c1deb6be04ef895133fc4a8b5f46bbf1e0769f09f68dae0d5ed49f7N

    • Size

      73KB

    • MD5

      288959003ff898419c78a449c197c7b0

    • SHA1

      c3b38f9ee62ba701d0d1ea2d4056b4102e5c9d94

    • SHA256

      fc7985096c1deb6be04ef895133fc4a8b5f46bbf1e0769f09f68dae0d5ed49f7

    • SHA512

      1412bc113110a129d93be387fa4fb7f5e935258040db808c2e5f1373f703c1fa0e232476d8780803d32c14637b14aa07894117afbb83e527b44ff3e9c106034f

    • SSDEEP

      1536:IrDkjb1Y4LCdeO70rGFxngRBAMb+KR0Nc8QsJq3D1:ZtmeO70rGFWRBAe0Nc8QsCR

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks