General

  • Target

    485ef89e1d3604a996af1596dccb823c01e27bc48a6aad5856583c1e6488e091

  • Size

    72KB

  • Sample

    241108-16wq9s1dpk

  • MD5

    6534d02bbfc08f24315c150d8a92bc39

  • SHA1

    084f5bd65e6df213d7fa53d1fe912b50848562d3

  • SHA256

    485ef89e1d3604a996af1596dccb823c01e27bc48a6aad5856583c1e6488e091

  • SHA512

    d2bcf707303b1564f11eee159668de00bcdb713c61254a204fddb6d1ff7344339baad4f681074ea323ddbd83fdcbb5f159fbc4a60fc16794d0e77de164b8439a

  • SSDEEP

    1536:I/xMMtXrLHpbJ0ZS+ASq7Z+1b3Rw8OfhYMb+KR0Nc8QsJq39:AMyX/JbJ0ZS+TyZ+vwffhYe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.0.5:443

Targets

    • Target

      485ef89e1d3604a996af1596dccb823c01e27bc48a6aad5856583c1e6488e091

    • Size

      72KB

    • MD5

      6534d02bbfc08f24315c150d8a92bc39

    • SHA1

      084f5bd65e6df213d7fa53d1fe912b50848562d3

    • SHA256

      485ef89e1d3604a996af1596dccb823c01e27bc48a6aad5856583c1e6488e091

    • SHA512

      d2bcf707303b1564f11eee159668de00bcdb713c61254a204fddb6d1ff7344339baad4f681074ea323ddbd83fdcbb5f159fbc4a60fc16794d0e77de164b8439a

    • SSDEEP

      1536:I/xMMtXrLHpbJ0ZS+ASq7Z+1b3Rw8OfhYMb+KR0Nc8QsJq39:AMyX/JbJ0ZS+TyZ+vwffhYe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks