General

  • Target

    733cdad5a5b10271f703049f46c2881d3dd13cbf172800b755fcfefe509bc144

  • Size

    72KB

  • Sample

    241107-arrwnatlfp

  • MD5

    cd96b2ce9132cac1b7afd45bb48ac115

  • SHA1

    eac7c25212467b802dfce01bee49961841af8086

  • SHA256

    733cdad5a5b10271f703049f46c2881d3dd13cbf172800b755fcfefe509bc144

  • SHA512

    36cca7e922b3e3055b8ee92c86c5fcf28a9b51ade5f90c45783160a95750edb7e3cf1bf3be92e6e411338b51e9b7455493a2057f517981aabc1ca54515d5aa44

  • SSDEEP

    1536:II1HGtEOlbCbRBlCrBqF+ZqDASqi9Zw9GDMb+KR0Nc8QsJq39:BlIEORCtBErxkc7+e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:4444

Targets

    • Target

      733cdad5a5b10271f703049f46c2881d3dd13cbf172800b755fcfefe509bc144

    • Size

      72KB

    • MD5

      cd96b2ce9132cac1b7afd45bb48ac115

    • SHA1

      eac7c25212467b802dfce01bee49961841af8086

    • SHA256

      733cdad5a5b10271f703049f46c2881d3dd13cbf172800b755fcfefe509bc144

    • SHA512

      36cca7e922b3e3055b8ee92c86c5fcf28a9b51ade5f90c45783160a95750edb7e3cf1bf3be92e6e411338b51e9b7455493a2057f517981aabc1ca54515d5aa44

    • SSDEEP

      1536:II1HGtEOlbCbRBlCrBqF+ZqDASqi9Zw9GDMb+KR0Nc8QsJq39:BlIEORCtBErxkc7+e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks