General

  • Target

    d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039

  • Size

    72KB

  • Sample

    241105-e4dxsaxkdm

  • MD5

    81bb9aa35aa33104906b16cf4a794fe7

  • SHA1

    7a2a2fbe0f7db7b13641066a51500df500aabc57

  • SHA256

    d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039

  • SHA512

    c122bf12d03f2d62c2de481390c0d5136c7c0884eaadb42b0af9a093f29751adf8aeff395d04d1d3c8b2a0e4a5b4a7373ade60a37f45692410b8b083972d4404

  • SSDEEP

    1536:InlyMSzvEK0Ujb9iQg7sPefMb+KR0Nc8QsJq39:mlWzv+fsce0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.2.128:1337

Targets

    • Target

      d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039

    • Size

      72KB

    • MD5

      81bb9aa35aa33104906b16cf4a794fe7

    • SHA1

      7a2a2fbe0f7db7b13641066a51500df500aabc57

    • SHA256

      d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039

    • SHA512

      c122bf12d03f2d62c2de481390c0d5136c7c0884eaadb42b0af9a093f29751adf8aeff395d04d1d3c8b2a0e4a5b4a7373ade60a37f45692410b8b083972d4404

    • SSDEEP

      1536:InlyMSzvEK0Ujb9iQg7sPefMb+KR0Nc8QsJq39:mlWzv+fsce0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks