General

  • Target

    a7a608476e2acfd1608a988e1dd8a6d0777ffb4789d94bf7b7e0008824a34b56N.exe

  • Size

    6KB

  • Sample

    241113-vq2dxswcph

  • MD5

    619f8e7e93c8b91bc2d661c60a7a665b

  • SHA1

    bab7966f0ff246aa685266af52fee07c095fe069

  • SHA256

    44d72bbbad70f9bf9e27f3eebb3116a15d0534cd657492683ba99dcfaa4aa3ea

  • SHA512

    1d1cbea235ce87a666f94e0fc51d831d4ccab327bc852a0f9c88fb4c24902aabe143da72a5cd44c5ac570b743f4515b48b9ebada622584721814c446488929bd

  • SSDEEP

    48:6Q0puCN62QRojrgmZkfVKVNMdyQPA22loVtb6OTUYxZeCOOgIypcyjStv54tdt0b:K62QQE4ShNVt+OThW7jStP40pEzNtst

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.45.226:443/nbOEKdHrZky3J7Ym0C3N9gTM-POqGJ3bBVAUtRIK5irDgNH6vbHfMHLK2dM0Y3snyMgIi_D6sf-L0IiIwZPAGvnNTaPtXs3dgE7jsDKSjz-mepvAkHqZE0L7cZueU4JZNPVMwqnyxjRYp6-NKyAL0P9an1DLbboPYySi1eB5NFjx8_2gCOQuxnGbVxoEY6Mr-fj7E2_AJsmxC50iGsvrYa

Targets

    • Target

      a7a608476e2acfd1608a988e1dd8a6d0777ffb4789d94bf7b7e0008824a34b56N.exe

    • Size

      6KB

    • MD5

      619f8e7e93c8b91bc2d661c60a7a665b

    • SHA1

      bab7966f0ff246aa685266af52fee07c095fe069

    • SHA256

      44d72bbbad70f9bf9e27f3eebb3116a15d0534cd657492683ba99dcfaa4aa3ea

    • SHA512

      1d1cbea235ce87a666f94e0fc51d831d4ccab327bc852a0f9c88fb4c24902aabe143da72a5cd44c5ac570b743f4515b48b9ebada622584721814c446488929bd

    • SSDEEP

      48:6Q0puCN62QRojrgmZkfVKVNMdyQPA22loVtb6OTUYxZeCOOgIypcyjStv54tdt0b:K62QQE4ShNVt+OThW7jStP40pEzNtst

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks