General

  • Target

    Macro2.exe

  • Size

    72KB

  • Sample

    241115-w5qreayhrb

  • MD5

    e0dbf63fbaba9fd87d48a9a0f1147c18

  • SHA1

    28fc4efb669a4198234b55e0cfb6bdd39b500692

  • SHA256

    7f03382b370fbe1864dd6a4e488c0c35366aa83542916cce18fa7785b454025c

  • SHA512

    3a4f86ac97c06b0bc420552f42537c6451fbb4137c3e6cb2589551d72733b2021ee491a041ed77c01e2dcc95ec70090732fcea6b952f26323cef85d9d157300e

  • SSDEEP

    1536:IAE3xD16yjL6l0Z10tEkuiKj8e64PR1aeQXrMb+KR0Nc8QsJq39:zE3B0yjLZZ10tUoxeQXre0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Targets

    • Target

      Macro2.exe

    • Size

      72KB

    • MD5

      e0dbf63fbaba9fd87d48a9a0f1147c18

    • SHA1

      28fc4efb669a4198234b55e0cfb6bdd39b500692

    • SHA256

      7f03382b370fbe1864dd6a4e488c0c35366aa83542916cce18fa7785b454025c

    • SHA512

      3a4f86ac97c06b0bc420552f42537c6451fbb4137c3e6cb2589551d72733b2021ee491a041ed77c01e2dcc95ec70090732fcea6b952f26323cef85d9d157300e

    • SSDEEP

      1536:IAE3xD16yjL6l0Z10tEkuiKj8e64PR1aeQXrMb+KR0Nc8QsJq39:zE3B0yjLZZ10tUoxeQXre0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks