General

  • Target

    d648f94f32992c9258c6b76885a7af8deffa14b775379843bace9514d292c3ab

  • Size

    818KB

  • Sample

    241111-ktjm6szphp

  • MD5

    4c80071e1d521f3b7ad9991df95ea058

  • SHA1

    1194796fff17d5a2cb9e1e2e12e0412cfbcaec25

  • SHA256

    d648f94f32992c9258c6b76885a7af8deffa14b775379843bace9514d292c3ab

  • SHA512

    264f1c766b3fc85375660c65ab07c09fcc3204b4441ddee51cd17a0435a53a1ac703e9eb90f924396c10f1e6923903ab04ab14518504814303e41f7420fdb63f

  • SSDEEP

    24576:hKavi92gKlHzZBmcM0R7TU3yS5XnUvoBSE:Li9SQB5mo5

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.188.135:4041

Targets

    • Target

      d648f94f32992c9258c6b76885a7af8deffa14b775379843bace9514d292c3ab

    • Size

      818KB

    • MD5

      4c80071e1d521f3b7ad9991df95ea058

    • SHA1

      1194796fff17d5a2cb9e1e2e12e0412cfbcaec25

    • SHA256

      d648f94f32992c9258c6b76885a7af8deffa14b775379843bace9514d292c3ab

    • SHA512

      264f1c766b3fc85375660c65ab07c09fcc3204b4441ddee51cd17a0435a53a1ac703e9eb90f924396c10f1e6923903ab04ab14518504814303e41f7420fdb63f

    • SSDEEP

      24576:hKavi92gKlHzZBmcM0R7TU3yS5XnUvoBSE:Li9SQB5mo5

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks