General

  • Target

    34b68b07652aefaee0f0e5e4eaded8218242dcd1a56200663da7a50617300b16

  • Size

    72KB

  • Sample

    241113-zwj42sykgy

  • MD5

    1c85ca968d12d186762d08cf5dfb1753

  • SHA1

    7e2f523c2cdd12b27a38beaf59caf83f24532e03

  • SHA256

    34b68b07652aefaee0f0e5e4eaded8218242dcd1a56200663da7a50617300b16

  • SHA512

    2d45a03c7e72221dba840f91da4c193509132b6d562eee8ff166992f560389d2258eb225dafa5650bf1a397ddc5d679317f2823492e4cbedfd901936e2d5b3e5

  • SSDEEP

    1536:ISLzVgDERyeFK55PpFK7UlZzjXUEkMb+KR0Nc8QsJq39:rqeQPDK7UrzjEje0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.197.129:6666

Targets

    • Target

      34b68b07652aefaee0f0e5e4eaded8218242dcd1a56200663da7a50617300b16

    • Size

      72KB

    • MD5

      1c85ca968d12d186762d08cf5dfb1753

    • SHA1

      7e2f523c2cdd12b27a38beaf59caf83f24532e03

    • SHA256

      34b68b07652aefaee0f0e5e4eaded8218242dcd1a56200663da7a50617300b16

    • SHA512

      2d45a03c7e72221dba840f91da4c193509132b6d562eee8ff166992f560389d2258eb225dafa5650bf1a397ddc5d679317f2823492e4cbedfd901936e2d5b3e5

    • SSDEEP

      1536:ISLzVgDERyeFK55PpFK7UlZzjXUEkMb+KR0Nc8QsJq39:rqeQPDK7UrzjEje0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks