General

  • Target

    0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66N

  • Size

    72KB

  • Sample

    241106-1e7dpayepr

  • MD5

    1c61d47541c207c0748c72ad0d353ed0

  • SHA1

    e6796a7610d296cd03657d5d76200be321ba4875

  • SHA256

    0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66

  • SHA512

    3133a6236a5a4e2eaee37c1b8ec1ad064bd39c41effe60a66b23e4af8750247bfa314b63ff044d598933df9c50572195d5bac071a0190a5f6f06d2e9d06c8f77

  • SSDEEP

    1536:IMjdw25W5PjOQx7aN7rZMb+KR0Nc8QsJq39:Dn5GPCw7cBe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Targets

    • Target

      0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66N

    • Size

      72KB

    • MD5

      1c61d47541c207c0748c72ad0d353ed0

    • SHA1

      e6796a7610d296cd03657d5d76200be321ba4875

    • SHA256

      0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66

    • SHA512

      3133a6236a5a4e2eaee37c1b8ec1ad064bd39c41effe60a66b23e4af8750247bfa314b63ff044d598933df9c50572195d5bac071a0190a5f6f06d2e9d06c8f77

    • SSDEEP

      1536:IMjdw25W5PjOQx7aN7rZMb+KR0Nc8QsJq39:Dn5GPCw7cBe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks