General

  • Target

    62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035N

  • Size

    72KB

  • Sample

    241105-e4m6fsxkej

  • MD5

    2f7bb7a2cbff596c3af6b1670154fe80

  • SHA1

    48e1973326af8334774bd9e36aec2a9d72eb9abe

  • SHA256

    62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035

  • SHA512

    dd7c54602e2791572f7d90848e1c2c7db892ab17d406962e6fde9c622a58fa234ed2f2fd561c504e0d016787890f9ac512ec49f69d18b1f096da4c8faef0bd81

  • SSDEEP

    1536:I+Zig03pD5+dIWHCUy/YB94X/vToMb+KR0Nc8QsJq39:nQr+dIeKgX4PvToe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.0.0.1:4444

Targets

    • Target

      62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035N

    • Size

      72KB

    • MD5

      2f7bb7a2cbff596c3af6b1670154fe80

    • SHA1

      48e1973326af8334774bd9e36aec2a9d72eb9abe

    • SHA256

      62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035

    • SHA512

      dd7c54602e2791572f7d90848e1c2c7db892ab17d406962e6fde9c622a58fa234ed2f2fd561c504e0d016787890f9ac512ec49f69d18b1f096da4c8faef0bd81

    • SSDEEP

      1536:I+Zig03pD5+dIWHCUy/YB94X/vToMb+KR0Nc8QsJq39:nQr+dIeKgX4PvToe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks