General

  • Target

    ffa428a2a6604a3a4ed10534058eafb904ecfc648e01ee9a3efc5b79c3eb2013

  • Size

    66KB

  • Sample

    241119-tgvpcayeml

  • MD5

    fe4091f1c7d750d38e26daf2ea2173da

  • SHA1

    83a2b99b128f2857ad5a8e293577d999751a8dff

  • SHA256

    ffa428a2a6604a3a4ed10534058eafb904ecfc648e01ee9a3efc5b79c3eb2013

  • SHA512

    448c683d002802b14203e23362f311f4fc761e603b0115dec108c3c62214a00c13f23fba39cad81d5e6e3b0acf1c13ca20eb2473c493da3621403206217196fa

  • SSDEEP

    1536:ClP/0bmV+1LCLMEVzsaNxSEXfjS1625AWS7DfN:CJ8bmE1LCLMEVoou16SS9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://47.98.106.5:60006/tZWhhtQn/RpqSGUuDlKW4nLmd3cBeawwNwwiK1IRa9LH9NC-IcAu6Llz2KrP1uUjSubscv45BOWCkp7geFTLYdr_BGECJL2ftNBL8hFR9CZSleMo

Targets

    • Target

      ffa428a2a6604a3a4ed10534058eafb904ecfc648e01ee9a3efc5b79c3eb2013

    • Size

      66KB

    • MD5

      fe4091f1c7d750d38e26daf2ea2173da

    • SHA1

      83a2b99b128f2857ad5a8e293577d999751a8dff

    • SHA256

      ffa428a2a6604a3a4ed10534058eafb904ecfc648e01ee9a3efc5b79c3eb2013

    • SHA512

      448c683d002802b14203e23362f311f4fc761e603b0115dec108c3c62214a00c13f23fba39cad81d5e6e3b0acf1c13ca20eb2473c493da3621403206217196fa

    • SSDEEP

      1536:ClP/0bmV+1LCLMEVzsaNxSEXfjS1625AWS7DfN:CJ8bmE1LCLMEVoou16SS9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks