General

  • Target

    8e98b22d1091d9ac216d597c32d4733edce0268bda6776ab17cccbf870658918N.exe

  • Size

    72KB

  • Sample

    241125-jj1chaskeq

  • MD5

    36aed17c63d222dfd190dc7246f79ca0

  • SHA1

    7b3764b7303db80cbb300c12c598cfaea374ede1

  • SHA256

    8e98b22d1091d9ac216d597c32d4733edce0268bda6776ab17cccbf870658918

  • SHA512

    ea5694d45615f6c307a103a4f7cafac8ddd1dd761f4f5e7207da5ba4a5db265c92957f0ab71e87beafe346d7bbf17bb32485a85bb8a54b1fc6cdaf41d813e62c

  • SSDEEP

    1536:IKpNeDtaCRTGngFWEcl+dSGH+UeFv2smHgTv/rKMb+KR0Nc8QsJq39:DjeDsCAgml+LRxv4Oe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.220.128:8080/4ehGJJ_Qjg3VS9RKsnf98QZUj-JTRHu5arsTe8-hY8YORkBSzweatozRLYhN_QOS4X5RgpkGaHp8vYuRO2yUP6uWwr9eJEfByFjOEz4L_3NgvYdfpsgohGeA6JIie-PjpBrLdBGiZ-bkP9L6rFsRcePWKjm2RBT4tIo

Targets

    • Target

      8e98b22d1091d9ac216d597c32d4733edce0268bda6776ab17cccbf870658918N.exe

    • Size

      72KB

    • MD5

      36aed17c63d222dfd190dc7246f79ca0

    • SHA1

      7b3764b7303db80cbb300c12c598cfaea374ede1

    • SHA256

      8e98b22d1091d9ac216d597c32d4733edce0268bda6776ab17cccbf870658918

    • SHA512

      ea5694d45615f6c307a103a4f7cafac8ddd1dd761f4f5e7207da5ba4a5db265c92957f0ab71e87beafe346d7bbf17bb32485a85bb8a54b1fc6cdaf41d813e62c

    • SSDEEP

      1536:IKpNeDtaCRTGngFWEcl+dSGH+UeFv2smHgTv/rKMb+KR0Nc8QsJq39:DjeDsCAgml+LRxv4Oe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks