General

  • Target

    5230a9c1f5c87b1a52c4423dc0ca5f76e99375f8d1a6f896882760ccaf1574ee

  • Size

    72KB

  • Sample

    241111-2ce24ayark

  • MD5

    b039a0459935f7b4f79cace0bae5154e

  • SHA1

    554a050d9d5ea70029da7ddcb82f3fd2df486113

  • SHA256

    5230a9c1f5c87b1a52c4423dc0ca5f76e99375f8d1a6f896882760ccaf1574ee

  • SHA512

    e079cdcc8fc1026805d5dd39c041254c427ea291129756752713ba0c479b15da6f3e70dfac82d6b468ff4287f1681eb2e649029ea4f060770881de2903b2b38d

  • SSDEEP

    1536:I0gEcGnWtxIZAXd7rgZEf7IKUKuMb+KR0Nc8QsJq39:NOQKd7Eace0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.1.44:443/kLFcLZPZbfeBt4C25pjKagnJErXVBOcNvIi2TgCwRcvwtQ6Ov_kfLFyjUHMHkPLO5LOcywWOdSPyB1rVFm4fOmb1jfiDyA-Hl8FJ9h2ya_QoZn6iCBWETicTybP-c05NqBfEjdvQlQsyUWyDlUjGChwxMc7IlN-lxPb0vMizV-PY8k-QXCo1D2jtv1WjM4Q4RZSuxaZoia8pDc7MB1tYhPgs7eIu3sTV7XNrhfsIIGs4kFk5EX

Targets

    • Target

      5230a9c1f5c87b1a52c4423dc0ca5f76e99375f8d1a6f896882760ccaf1574ee

    • Size

      72KB

    • MD5

      b039a0459935f7b4f79cace0bae5154e

    • SHA1

      554a050d9d5ea70029da7ddcb82f3fd2df486113

    • SHA256

      5230a9c1f5c87b1a52c4423dc0ca5f76e99375f8d1a6f896882760ccaf1574ee

    • SHA512

      e079cdcc8fc1026805d5dd39c041254c427ea291129756752713ba0c479b15da6f3e70dfac82d6b468ff4287f1681eb2e649029ea4f060770881de2903b2b38d

    • SSDEEP

      1536:I0gEcGnWtxIZAXd7rgZEf7IKUKuMb+KR0Nc8QsJq39:NOQKd7Eace0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks