General

  • Target

    0539c48b47da5409c4299e002e132768.exe

  • Size

    72KB

  • Sample

    240925-hzcqpsvdpg

  • MD5

    0539c48b47da5409c4299e002e132768

  • SHA1

    f8f8d7258f92aaad1773bee41f4032ebf8d7c916

  • SHA256

    77550cc0d9aa70e6d6b180538390e67d6acf8eb0802a6381bd14562b90a31ac1

  • SHA512

    d616bd922c2a176243967407a0da999193d9d538069295ef331f60c835b8034d638be04509d31378cb935a6bc9b1b1efb4469a47b8f4dddb8dbc55c257bb02c4

  • SSDEEP

    1536:I65M0ibDALpsa6QMyXhp+qY9AYIPfI5nKRcMb+KR0Nc8QsJq39:TSbD6t1Mcw9mA5nSce0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

    • Target

      0539c48b47da5409c4299e002e132768.exe

    • Size

      72KB

    • MD5

      0539c48b47da5409c4299e002e132768

    • SHA1

      f8f8d7258f92aaad1773bee41f4032ebf8d7c916

    • SHA256

      77550cc0d9aa70e6d6b180538390e67d6acf8eb0802a6381bd14562b90a31ac1

    • SHA512

      d616bd922c2a176243967407a0da999193d9d538069295ef331f60c835b8034d638be04509d31378cb935a6bc9b1b1efb4469a47b8f4dddb8dbc55c257bb02c4

    • SSDEEP

      1536:I65M0ibDALpsa6QMyXhp+qY9AYIPfI5nKRcMb+KR0Nc8QsJq39:TSbD6t1Mcw9mA5nSce0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks