General

  • Target

    aeebbe1a75df0f8e37bd863fe24c26512dad41e9b14d09268c83a31cdb53d6bf

  • Size

    72KB

  • Sample

    241114-b45hyssgnn

  • MD5

    636abbd8d0cac658f2cefc02f3bcd232

  • SHA1

    53859b9d03c719a26a139311b00c76c186a59dd7

  • SHA256

    aeebbe1a75df0f8e37bd863fe24c26512dad41e9b14d09268c83a31cdb53d6bf

  • SHA512

    2c153b3a39348865af06da965a4bbc3afad128622d5ee6fd5b480d7e42417970ac8cdefdd3fdbf5a82a1e9b3c8896d501777713e0ea99b2038a3854e812f439f

  • SSDEEP

    1536:I0QTgXvEmC7uGLTyUV+GAUEmUhLXwquVcMb+KR0Nc8QsJq39:HtC3+TUAh2Oe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

18.203.89.38:8443

Targets

    • Target

      aeebbe1a75df0f8e37bd863fe24c26512dad41e9b14d09268c83a31cdb53d6bf

    • Size

      72KB

    • MD5

      636abbd8d0cac658f2cefc02f3bcd232

    • SHA1

      53859b9d03c719a26a139311b00c76c186a59dd7

    • SHA256

      aeebbe1a75df0f8e37bd863fe24c26512dad41e9b14d09268c83a31cdb53d6bf

    • SHA512

      2c153b3a39348865af06da965a4bbc3afad128622d5ee6fd5b480d7e42417970ac8cdefdd3fdbf5a82a1e9b3c8896d501777713e0ea99b2038a3854e812f439f

    • SSDEEP

      1536:I0QTgXvEmC7uGLTyUV+GAUEmUhLXwquVcMb+KR0Nc8QsJq39:HtC3+TUAh2Oe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks