General

  • Target

    6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9N

  • Size

    72KB

  • Sample

    241105-pc9v9a1gmr

  • MD5

    c00d0b1cbecccd2d4ff4ec8b4f819cd0

  • SHA1

    42422dfa4b815d717df6c6ea3b7f19ad5696b9ae

  • SHA256

    6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9

  • SHA512

    c3744cf761b6380b533c5f0b08bc1ef31fb86675d639c66d2aa18046a31b66a092ef74a4262bc8a6bf350e8411bcaf96a296981dd7268023fb50527e970479c8

  • SSDEEP

    1536:IOe6D1ILofDg73vuStVo06JzPpRk6Mb+KR0Nc8QsJq39:C6D1OofI/u2CzBle0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.93.129:4444

Targets

    • Target

      6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9N

    • Size

      72KB

    • MD5

      c00d0b1cbecccd2d4ff4ec8b4f819cd0

    • SHA1

      42422dfa4b815d717df6c6ea3b7f19ad5696b9ae

    • SHA256

      6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9

    • SHA512

      c3744cf761b6380b533c5f0b08bc1ef31fb86675d639c66d2aa18046a31b66a092ef74a4262bc8a6bf350e8411bcaf96a296981dd7268023fb50527e970479c8

    • SSDEEP

      1536:IOe6D1ILofDg73vuStVo06JzPpRk6Mb+KR0Nc8QsJq39:C6D1OofI/u2CzBle0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks