General

  • Target

    a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe

  • Size

    72KB

  • Sample

    241127-c4m5cayrdj

  • MD5

    1179ce43bb61087aa062a931413f768f

  • SHA1

    0326746d2321dd4f6af610022140323e0b9d8786

  • SHA256

    a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe

  • SHA512

    bc007bd6774a2eb63d02402be9102c62f18277c5bbf8e8d8bd3e74b7c6304727200d831f98d63a10bab743c4bdf1c9febc91910243906b792335a0ce723a3954

  • SSDEEP

    1536:IGYjC72V5oobSAHrlKf2irFA8IJswblMb+KR0Nc8QsJq39:ryCiwnOwjrFVI/e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Targets

    • Target

      a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe

    • Size

      72KB

    • MD5

      1179ce43bb61087aa062a931413f768f

    • SHA1

      0326746d2321dd4f6af610022140323e0b9d8786

    • SHA256

      a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe

    • SHA512

      bc007bd6774a2eb63d02402be9102c62f18277c5bbf8e8d8bd3e74b7c6304727200d831f98d63a10bab743c4bdf1c9febc91910243906b792335a0ce723a3954

    • SSDEEP

      1536:IGYjC72V5oobSAHrlKf2irFA8IJswblMb+KR0Nc8QsJq39:ryCiwnOwjrFVI/e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks