General

  • Target

    8a7fb8ad7baa4e26b61f6204718dbc843c73a0d4fe424f108d42111af94552b5.exe

  • Size

    72KB

  • Sample

    241127-flxslsyjfy

  • MD5

    dc64b06effe08a7c87d080e7aecd4342

  • SHA1

    a039c3019cdd36883a788ef68db6200fef75f7d7

  • SHA256

    8a7fb8ad7baa4e26b61f6204718dbc843c73a0d4fe424f108d42111af94552b5

  • SHA512

    cdc6a85186b55ef9f4b82a0efeb89bd7b4d863e8ec976c372f149c79d2f56d67ec88cf07fe319f3689c7881725de940ba93a06f979c75ba6fa946927d38e8aca

  • SSDEEP

    1536:IKpNeDtaCRTGngFWEcl+dSGH+UeFv2smHgTv/rKMb+KR0Nc8QsJq3N:DjeDsCAgml+LRxv4Oe0Nc8QsCN

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.220.128:8080/4ehGJJ_Qjg3VS9RKsnf98QZUj-JTRHu5arsTe8-hY8YORkBSzweatozRLYhN_QOS4X5RgpkGaHp8vYuRO2yUP6uWwr9eJEfByFjOEz4L_3NgvYdfpsgohGeA6JIie-PjpBrLdBGiZ-bkP9L6rFsRcePWKjm2RBT4tIo

Targets

    • Target

      8a7fb8ad7baa4e26b61f6204718dbc843c73a0d4fe424f108d42111af94552b5.exe

    • Size

      72KB

    • MD5

      dc64b06effe08a7c87d080e7aecd4342

    • SHA1

      a039c3019cdd36883a788ef68db6200fef75f7d7

    • SHA256

      8a7fb8ad7baa4e26b61f6204718dbc843c73a0d4fe424f108d42111af94552b5

    • SHA512

      cdc6a85186b55ef9f4b82a0efeb89bd7b4d863e8ec976c372f149c79d2f56d67ec88cf07fe319f3689c7881725de940ba93a06f979c75ba6fa946927d38e8aca

    • SSDEEP

      1536:IKpNeDtaCRTGngFWEcl+dSGH+UeFv2smHgTv/rKMb+KR0Nc8QsJq3N:DjeDsCAgml+LRxv4Oe0Nc8QsCN

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks