General

  • Target

    652dca0e1df976da497b4bd7fbb40f28d0756b78b349766505748bdfe77c4963

  • Size

    72KB

  • Sample

    240925-t2hkhsvgqj

  • MD5

    d8e3b8e49c46b0fced9d4c6a2a553654

  • SHA1

    731dd7fa150f651d6f598b32e7897e16f47d5b25

  • SHA256

    652dca0e1df976da497b4bd7fbb40f28d0756b78b349766505748bdfe77c4963

  • SHA512

    9db2c490bdb95f5f204b2c88189999b49b682b7694f442fa67d8348c5bbe7de75c40bfcd6eea5e0de6213556722b7c3960e1dd79e7213d994ab4b41cc24e0a92

  • SSDEEP

    1536:I7waaffMqfimx8c7tQdAsxO5GvQfMNVzxoytMb+KR0Nc8QsJq39:Kw7ffTiYOdAwOwQ8VdXe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

    • Target

      652dca0e1df976da497b4bd7fbb40f28d0756b78b349766505748bdfe77c4963

    • Size

      72KB

    • MD5

      d8e3b8e49c46b0fced9d4c6a2a553654

    • SHA1

      731dd7fa150f651d6f598b32e7897e16f47d5b25

    • SHA256

      652dca0e1df976da497b4bd7fbb40f28d0756b78b349766505748bdfe77c4963

    • SHA512

      9db2c490bdb95f5f204b2c88189999b49b682b7694f442fa67d8348c5bbe7de75c40bfcd6eea5e0de6213556722b7c3960e1dd79e7213d994ab4b41cc24e0a92

    • SSDEEP

      1536:I7waaffMqfimx8c7tQdAsxO5GvQfMNVzxoytMb+KR0Nc8QsJq39:Kw7ffTiYOdAwOwQ8VdXe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks