General

  • Target

    ca4d7b61ab00b70d86a0e2d3699d938e.exe

  • Size

    72KB

  • Sample

    240923-wzb13azekb

  • MD5

    ca4d7b61ab00b70d86a0e2d3699d938e

  • SHA1

    29c1433ccf89f21646d9a041f118d19cb169cc6c

  • SHA256

    86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891

  • SHA512

    b2c0353440eb06a4bd5e88264915ccfe9a4e153619f9722a842d0313ccb5cc6fb2d887f400830b7e58f8f5afcf03d74aa6fca87747b27dc5546d605e5db74df3

  • SSDEEP

    1536:IAgOq+vPocJ2VRwx3MJY6WEydMb+KR0Nc8QsJq39:1nq9cJ2E36Wrde0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

    • Target

      ca4d7b61ab00b70d86a0e2d3699d938e.exe

    • Size

      72KB

    • MD5

      ca4d7b61ab00b70d86a0e2d3699d938e

    • SHA1

      29c1433ccf89f21646d9a041f118d19cb169cc6c

    • SHA256

      86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891

    • SHA512

      b2c0353440eb06a4bd5e88264915ccfe9a4e153619f9722a842d0313ccb5cc6fb2d887f400830b7e58f8f5afcf03d74aa6fca87747b27dc5546d605e5db74df3

    • SSDEEP

      1536:IAgOq+vPocJ2VRwx3MJY6WEydMb+KR0Nc8QsJq39:1nq9cJ2E36Wrde0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks