General

  • Target

    6ffc275c3ec707a75468761857a951ca038fcbf20aebdcbb42c4568f23d43225N

  • Size

    72KB

  • Sample

    240923-pmcy9szdmf

  • MD5

    03a43d9760f410dbad3227c60fb18e00

  • SHA1

    390c66a31f642b9765b7c92780dfd20e885d9c18

  • SHA256

    6ffc275c3ec707a75468761857a951ca038fcbf20aebdcbb42c4568f23d43225

  • SHA512

    35da22a2c33b4dd71dcbe62e1fb82fe6c1cbd7162ef5eb619d09caca88283bf445bfe5382c5a1089ae10a793ba375fea78d908df8cd9a68c1df801a84a70ceb0

  • SSDEEP

    1536:Iv8+Oo1eiXc9lrBeLl9nGi91S6N047Mb+KR0Nc8QsJq39:K8+tVX+1BeLnnGi91S6f7e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.7.104:4444

Targets

    • Target

      6ffc275c3ec707a75468761857a951ca038fcbf20aebdcbb42c4568f23d43225N

    • Size

      72KB

    • MD5

      03a43d9760f410dbad3227c60fb18e00

    • SHA1

      390c66a31f642b9765b7c92780dfd20e885d9c18

    • SHA256

      6ffc275c3ec707a75468761857a951ca038fcbf20aebdcbb42c4568f23d43225

    • SHA512

      35da22a2c33b4dd71dcbe62e1fb82fe6c1cbd7162ef5eb619d09caca88283bf445bfe5382c5a1089ae10a793ba375fea78d908df8cd9a68c1df801a84a70ceb0

    • SSDEEP

      1536:Iv8+Oo1eiXc9lrBeLl9nGi91S6N047Mb+KR0Nc8QsJq39:K8+tVX+1BeLnnGi91S6f7e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks