General

  • Target

    8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085N

  • Size

    72KB

  • Sample

    241110-gg86hszqax

  • MD5

    81b6122eccea93ed2c9e7980621e7280

  • SHA1

    0a74dfb509b7ec3ce8bcff5f6535a7568906e378

  • SHA256

    8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085

  • SHA512

    9eea33b87bbd3829e913a3fa8468fa20f7b869ca6636209198e8effd30a4b6e12aece04f015522a207b2b8b4caed4adb98b9829d6d8f27f2e7a1982aad9666ae

  • SSDEEP

    1536:IU/RN3N7nsTU1+TBrc83rFo8hAlcL8tNk5/Mb+KR0Nc8QsJq39:XZN9DQk+ZcuhAGYti9e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.102:4444

Targets

    • Target

      8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085N

    • Size

      72KB

    • MD5

      81b6122eccea93ed2c9e7980621e7280

    • SHA1

      0a74dfb509b7ec3ce8bcff5f6535a7568906e378

    • SHA256

      8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085

    • SHA512

      9eea33b87bbd3829e913a3fa8468fa20f7b869ca6636209198e8effd30a4b6e12aece04f015522a207b2b8b4caed4adb98b9829d6d8f27f2e7a1982aad9666ae

    • SSDEEP

      1536:IU/RN3N7nsTU1+TBrc83rFo8hAlcL8tNk5/Mb+KR0Nc8QsJq39:XZN9DQk+ZcuhAGYti9e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks