General

  • Target

    7e015de2bfe5e42e20ae7b7722348083e2a35adf1056a40cc9ec9e89007bd56d

  • Size

    469KB

  • Sample

    241123-twy1baxpcw

  • MD5

    a1e674f23de3858f585d12349b2ff85a

  • SHA1

    18876d23657979e09193a120d2af56eea7708475

  • SHA256

    7e015de2bfe5e42e20ae7b7722348083e2a35adf1056a40cc9ec9e89007bd56d

  • SHA512

    586c630e70ae2d5c171020d7c27dc8b5b9b1f07f1cf9404d0fbd73de32e903ab510540e018661cec56dba1e2095595da3c8623b4114304c19e2ada27cc64d08d

  • SSDEEP

    6144:KBJQu8i2zdiJ2Z9238tXijuL4CJtrWR4cxCFwBAO4oe7QIy:KBJmi252MtXiju4WRckFwBKPQIy

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://58.215.145.98:443/collect/v2/

Targets

    • Target

      7e015de2bfe5e42e20ae7b7722348083e2a35adf1056a40cc9ec9e89007bd56d

    • Size

      469KB

    • MD5

      a1e674f23de3858f585d12349b2ff85a

    • SHA1

      18876d23657979e09193a120d2af56eea7708475

    • SHA256

      7e015de2bfe5e42e20ae7b7722348083e2a35adf1056a40cc9ec9e89007bd56d

    • SHA512

      586c630e70ae2d5c171020d7c27dc8b5b9b1f07f1cf9404d0fbd73de32e903ab510540e018661cec56dba1e2095595da3c8623b4114304c19e2ada27cc64d08d

    • SSDEEP

      6144:KBJQu8i2zdiJ2Z9238tXijuL4CJtrWR4cxCFwBAO4oe7QIy:KBJmi252MtXiju4WRckFwBKPQIy

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks