General

  • Target

    0f8287a51d4337e75309276ded60ab71dec6e141b892163c38e31a91b52777c0

  • Size

    1.2MB

  • Sample

    241127-l595yayqb1

  • MD5

    1af221822f606bf75fb451e5c294614c

  • SHA1

    1edaa8045446a50173ec6b8a6400d9091e907fc7

  • SHA256

    0f8287a51d4337e75309276ded60ab71dec6e141b892163c38e31a91b52777c0

  • SHA512

    26daaaf8401241ae9214fc4828d236c26ed350078c4302eaf97d8aa1c8e9487236dee3e63e422f970ad75c8423ecfcc6ec49fa1a899d712741836aac9650501f

  • SSDEEP

    24576:WTD8B/thj9C2kkapxCo0GcxhXwTSn+D3auCy:84NLj9CZxCo0DxR+Dqu

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

124.248.70.245:29782

Targets

    • Target

      0f8287a51d4337e75309276ded60ab71dec6e141b892163c38e31a91b52777c0

    • Size

      1.2MB

    • MD5

      1af221822f606bf75fb451e5c294614c

    • SHA1

      1edaa8045446a50173ec6b8a6400d9091e907fc7

    • SHA256

      0f8287a51d4337e75309276ded60ab71dec6e141b892163c38e31a91b52777c0

    • SHA512

      26daaaf8401241ae9214fc4828d236c26ed350078c4302eaf97d8aa1c8e9487236dee3e63e422f970ad75c8423ecfcc6ec49fa1a899d712741836aac9650501f

    • SSDEEP

      24576:WTD8B/thj9C2kkapxCo0GcxhXwTSn+D3auCy:84NLj9CZxCo0DxR+Dqu

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks