General

  • Target

    a7a608476e2acfd1608a988e1dd8a6d0777ffb4789d94bf7b7e0008824a34b56N

  • Size

    6KB

  • Sample

    241111-zxxrjawhka

  • MD5

    1df6e8787ba2380f3a0cd141961dbe90

  • SHA1

    1ce55246ed057b6cb8bda03a85ede02ed9f15d71

  • SHA256

    a7a608476e2acfd1608a988e1dd8a6d0777ffb4789d94bf7b7e0008824a34b56

  • SHA512

    5c6a2cbb7071209fdab5a37d4d729ed8844bd10692f0e4a7475e8328869817550928a9f97d92eda2c1e3646966716351792954c4d097a8ae2122d66ffcf6dd75

  • SSDEEP

    48:6Q0puCN62QRojrgmZkfVKVNMdyQPA22loVtb6OTUYxZeCOOgIypcyjStv54tdt0Z:K62QQE4ShNVt+OThW7jStP40pEzNt

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.45.226:443/nbOEKdHrZky3J7Ym0C3N9gTM-POqGJ3bBVAUtRIK5irDgNH6vbHfMHLK2dM0Y3snyMgIi_D6sf-L0IiIwZPAGvnNTaPtXs3dgE7jsDKSjz-mepvAkHqZE0L7cZueU4JZNPVMwqnyxjRYp6-NKyAL0P9an1DLbboPYySi1eB5NFjx8_2gCOQuxnGbVxoEY6Mr-fj7E2_AJsmxC50iGsvrYa

Targets

    • Target

      a7a608476e2acfd1608a988e1dd8a6d0777ffb4789d94bf7b7e0008824a34b56N

    • Size

      6KB

    • MD5

      1df6e8787ba2380f3a0cd141961dbe90

    • SHA1

      1ce55246ed057b6cb8bda03a85ede02ed9f15d71

    • SHA256

      a7a608476e2acfd1608a988e1dd8a6d0777ffb4789d94bf7b7e0008824a34b56

    • SHA512

      5c6a2cbb7071209fdab5a37d4d729ed8844bd10692f0e4a7475e8328869817550928a9f97d92eda2c1e3646966716351792954c4d097a8ae2122d66ffcf6dd75

    • SSDEEP

      48:6Q0puCN62QRojrgmZkfVKVNMdyQPA22loVtb6OTUYxZeCOOgIypcyjStv54tdt0Z:K62QQE4ShNVt+OThW7jStP40pEzNt

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks