General

  • Target

    b2c116df4624dac474673c0f498de84e54bd7844ccc38c9fe8f38b18bc4a1e73N

  • Size

    72KB

  • Sample

    241110-jhb9aawjar

  • MD5

    505141c14d66d90fc40a3ef94b4ce8c0

  • SHA1

    8fd5c80cd09e157102c28ef5f5933ca68893b0b0

  • SHA256

    b2c116df4624dac474673c0f498de84e54bd7844ccc38c9fe8f38b18bc4a1e73

  • SHA512

    eadd907f4b2550245627fbd5cec3489f8ee332ed1f404a200f5bbfd202d0bce42312b482906161c7b6496c0acca330587abba406205f7d96d49239c6a8f7eddf

  • SSDEEP

    1536:IkyhB+aGg88KBGSM8G+66c0Cb2Mb+KR0Nc8QsJq39:Vo5lKBR46c0Cae0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.1.44:443/eFLpDAK04RoqbStsTUdyaw8busvT_KtVC3yv5D8Wv2y90b1erE4CMZJ8h0X-MdrJHGpWiaRF0Bt-jV3WEjofh6JU8FGKWBWF4kJ

Targets

    • Target

      b2c116df4624dac474673c0f498de84e54bd7844ccc38c9fe8f38b18bc4a1e73N

    • Size

      72KB

    • MD5

      505141c14d66d90fc40a3ef94b4ce8c0

    • SHA1

      8fd5c80cd09e157102c28ef5f5933ca68893b0b0

    • SHA256

      b2c116df4624dac474673c0f498de84e54bd7844ccc38c9fe8f38b18bc4a1e73

    • SHA512

      eadd907f4b2550245627fbd5cec3489f8ee332ed1f404a200f5bbfd202d0bce42312b482906161c7b6496c0acca330587abba406205f7d96d49239c6a8f7eddf

    • SSDEEP

      1536:IkyhB+aGg88KBGSM8G+66c0Cb2Mb+KR0Nc8QsJq39:Vo5lKBR46c0Cae0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks