General

  • Target

    5da3a179fe302e30f4dccfaee7d4ffacf5533d0876783931362dcbdffbf46803

  • Size

    1.2MB

  • Sample

    241127-l52hssyqa1

  • MD5

    de5b992c2026a2cde835d90cd370ad9a

  • SHA1

    ecfaaeae6d6455f53f312ddf022c2c0c33d58888

  • SHA256

    5da3a179fe302e30f4dccfaee7d4ffacf5533d0876783931362dcbdffbf46803

  • SHA512

    31f85cd2522dbdcae02d5a17f298484d64cd23e040ca8b9141c2c53dfff527c084acacaf3bed60c5ba0173ace9a0e27c4c9be20ade813e02459070a02f95c5a7

  • SSDEEP

    24576:WTD8B/thj9C2kkapxCo0GcxhXwTSn+D3auCyY:84NLj9CZxCo0DxR+DquK

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

124.248.70.245:29782

Targets

    • Target

      5da3a179fe302e30f4dccfaee7d4ffacf5533d0876783931362dcbdffbf46803

    • Size

      1.2MB

    • MD5

      de5b992c2026a2cde835d90cd370ad9a

    • SHA1

      ecfaaeae6d6455f53f312ddf022c2c0c33d58888

    • SHA256

      5da3a179fe302e30f4dccfaee7d4ffacf5533d0876783931362dcbdffbf46803

    • SHA512

      31f85cd2522dbdcae02d5a17f298484d64cd23e040ca8b9141c2c53dfff527c084acacaf3bed60c5ba0173ace9a0e27c4c9be20ade813e02459070a02f95c5a7

    • SSDEEP

      24576:WTD8B/thj9C2kkapxCo0GcxhXwTSn+D3auCyY:84NLj9CZxCo0DxR+DquK

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks