General

  • Target

    67beabd101a071541c361248a8c49aa7bfacfddcc190e8bae83d98e2ffcb5f70N

  • Size

    72KB

  • Sample

    241110-kj6pysspc1

  • MD5

    b78618263dfd18d51f5953dfe1c542a0

  • SHA1

    a9dbd754374758b0517bbb4e21827e2edc3d6e3f

  • SHA256

    67beabd101a071541c361248a8c49aa7bfacfddcc190e8bae83d98e2ffcb5f70

  • SHA512

    65163dd097df1b177896ab8fc5833f443c59406864dc9311ab22574cad3682d958480253712b15b2085b851e2ded90ad9f8edd2e1668856820df2b7d91fc1f82

  • SSDEEP

    1536:IgVclvGlpYz2lJrL/O99/G/N+HMb+KR0Nc8QsJq39:xVcoas5LG99/KNWe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.22:4444

Targets

    • Target

      67beabd101a071541c361248a8c49aa7bfacfddcc190e8bae83d98e2ffcb5f70N

    • Size

      72KB

    • MD5

      b78618263dfd18d51f5953dfe1c542a0

    • SHA1

      a9dbd754374758b0517bbb4e21827e2edc3d6e3f

    • SHA256

      67beabd101a071541c361248a8c49aa7bfacfddcc190e8bae83d98e2ffcb5f70

    • SHA512

      65163dd097df1b177896ab8fc5833f443c59406864dc9311ab22574cad3682d958480253712b15b2085b851e2ded90ad9f8edd2e1668856820df2b7d91fc1f82

    • SSDEEP

      1536:IgVclvGlpYz2lJrL/O99/G/N+HMb+KR0Nc8QsJq39:xVcoas5LG99/KNWe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks