General

  • Target

    0b8d3a735a6587147d3715c35aa2fd0f5877d5d84d5a8d2f610097251640a799

  • Size

    97KB

  • Sample

    241031-k761matndy

  • MD5

    9d9fabeb36f2f08e35b12cee2801dbdd

  • SHA1

    19c712dc6c4f3fd803c358e4e4011a8dd4091543

  • SHA256

    0b8d3a735a6587147d3715c35aa2fd0f5877d5d84d5a8d2f610097251640a799

  • SHA512

    1a3103cab13f07d954001ad786524153801f4772b16585128c1d086501401781f3a3030694c547268d65c96e3da411407223c5c4dd640be2253ace0ddb568aed

  • SSDEEP

    1536:CxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZ5vCBj:C1fpvCl

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.91.128:2316

Targets

    • Target

      0b8d3a735a6587147d3715c35aa2fd0f5877d5d84d5a8d2f610097251640a799

    • Size

      97KB

    • MD5

      9d9fabeb36f2f08e35b12cee2801dbdd

    • SHA1

      19c712dc6c4f3fd803c358e4e4011a8dd4091543

    • SHA256

      0b8d3a735a6587147d3715c35aa2fd0f5877d5d84d5a8d2f610097251640a799

    • SHA512

      1a3103cab13f07d954001ad786524153801f4772b16585128c1d086501401781f3a3030694c547268d65c96e3da411407223c5c4dd640be2253ace0ddb568aed

    • SSDEEP

      1536:CxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZ5vCBj:C1fpvCl

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks