General

  • Target

    73b651fb92cff7da1a293e63c136cfcb78a6865318a16da1c1f2e748af3817db.exe

  • Size

    124KB

  • Sample

    241009-vdcvsszakj

  • MD5

    94423c90eaf70bcaa544ebf53096e270

  • SHA1

    dc40d933e5cb11ed6ff3a04701b312bf02c47a84

  • SHA256

    73b651fb92cff7da1a293e63c136cfcb78a6865318a16da1c1f2e748af3817db

  • SHA512

    b7e035327586eb61e298cba0eda51b38a57110d3f676e5cfd7cc25e7a4f9d5da54a0e45b985811027e8b16d3dfedf86ce67edbbc805d244839c7b5282724a08c

  • SSDEEP

    1536:IG4R7cMS4b+d35cJ/40fUEOo/UJHtMb+KR0Nc8QsJq3:rMIM7b+Z5ca+UNo/Uje0Nc8QsC

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

194.59.31.31:8019

Targets

    • Target

      73b651fb92cff7da1a293e63c136cfcb78a6865318a16da1c1f2e748af3817db.exe

    • Size

      124KB

    • MD5

      94423c90eaf70bcaa544ebf53096e270

    • SHA1

      dc40d933e5cb11ed6ff3a04701b312bf02c47a84

    • SHA256

      73b651fb92cff7da1a293e63c136cfcb78a6865318a16da1c1f2e748af3817db

    • SHA512

      b7e035327586eb61e298cba0eda51b38a57110d3f676e5cfd7cc25e7a4f9d5da54a0e45b985811027e8b16d3dfedf86ce67edbbc805d244839c7b5282724a08c

    • SSDEEP

      1536:IG4R7cMS4b+d35cJ/40fUEOo/UJHtMb+KR0Nc8QsJq3:rMIM7b+Z5ca+UNo/Uje0Nc8QsC

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks