General

  • Target

    22c923e3278b0a1df89b782cebb153d66204f2aa51a0e89a36e2de21fa25afc5

  • Size

    3.2MB

  • Sample

    241006-phc4gatclp

  • MD5

    e3b085bf28df48a7a6dd82951c3fc230

  • SHA1

    d97c2076e1631e8e9d700956ed6c572eb06e128d

  • SHA256

    22c923e3278b0a1df89b782cebb153d66204f2aa51a0e89a36e2de21fa25afc5

  • SHA512

    fe0b7875ee7bf02722764a3faa734e71e043a21ce8dcf3e704877b25ae2668eb34446f5faf019918c311992697553637ba19730b72e6a10d1fd368e5457a26c9

  • SSDEEP

    49152:ZqWhPfNFihb7HukfbzdD0Jw2Kq1RULSbV3cQmPfbzPZgkEYdY/:ZqWhnXQbdDzR0J+qtpUHW

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.128.129:443/RnEW

Targets

    • Target

      22c923e3278b0a1df89b782cebb153d66204f2aa51a0e89a36e2de21fa25afc5

    • Size

      3.2MB

    • MD5

      e3b085bf28df48a7a6dd82951c3fc230

    • SHA1

      d97c2076e1631e8e9d700956ed6c572eb06e128d

    • SHA256

      22c923e3278b0a1df89b782cebb153d66204f2aa51a0e89a36e2de21fa25afc5

    • SHA512

      fe0b7875ee7bf02722764a3faa734e71e043a21ce8dcf3e704877b25ae2668eb34446f5faf019918c311992697553637ba19730b72e6a10d1fd368e5457a26c9

    • SSDEEP

      49152:ZqWhPfNFihb7HukfbzdD0Jw2Kq1RULSbV3cQmPfbzPZgkEYdY/:ZqWhnXQbdDzR0J+qtpUHW

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks