General

  • Target

    4f40d400e330d4b482cf6f082f88a8e12284cc3c92b245d0edf35d0aec62c0d7

  • Size

    72KB

  • Sample

    241114-s6b3vs1drk

  • MD5

    07fe3351ece1aea6a11b969e2435179c

  • SHA1

    e8f7cf660f75250679fae484689cae8367d7a1aa

  • SHA256

    4f40d400e330d4b482cf6f082f88a8e12284cc3c92b245d0edf35d0aec62c0d7

  • SHA512

    14cdc115ad234e689a9f1785cb0e511430926973abea3c08212b6c76cc66cbc94cd1b67d0ed66d46d64e2c438f828aac6861a84397b482c95bee8f580a2bdc9c

  • SSDEEP

    1536:Iny62N4Tfx+RJ/wlFEi5RmKMb+KR0Nc8QsJq39:S2yqJ/wluiaKe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://134.195.90.78:8087/fTjT4AYrO_jHJcYkoBE_awhVCY366FLAzzEQYChM1moPnkjz2L8O-C_9dPiD0cM71Am4sRYUWaLmT_diVwNbxK4BlMex0NdXaRB6Wqi5kUwnFiY5EhC

Targets

    • Target

      4f40d400e330d4b482cf6f082f88a8e12284cc3c92b245d0edf35d0aec62c0d7

    • Size

      72KB

    • MD5

      07fe3351ece1aea6a11b969e2435179c

    • SHA1

      e8f7cf660f75250679fae484689cae8367d7a1aa

    • SHA256

      4f40d400e330d4b482cf6f082f88a8e12284cc3c92b245d0edf35d0aec62c0d7

    • SHA512

      14cdc115ad234e689a9f1785cb0e511430926973abea3c08212b6c76cc66cbc94cd1b67d0ed66d46d64e2c438f828aac6861a84397b482c95bee8f580a2bdc9c

    • SSDEEP

      1536:Iny62N4Tfx+RJ/wlFEi5RmKMb+KR0Nc8QsJq39:S2yqJ/wluiaKe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks