General

  • Target

    8c2df8d2fa1a69b0945fbf3ddf64eb1b1fa930c05c3b850c77df658f62fa83b3.exe

  • Size

    561KB

  • Sample

    241202-jg8k4awjgx

  • MD5

    56113c5a46eaa50811e58263c64e28aa

  • SHA1

    b6dbf9ce47afbae483ad22acc66d2e281a248109

  • SHA256

    8c2df8d2fa1a69b0945fbf3ddf64eb1b1fa930c05c3b850c77df658f62fa83b3

  • SHA512

    655d2c7b716a4035c0a6360ef6cab3c411a6d21d8c9837674fe75e704921c3f71e5de7418be3e04eb7a4c4a8b843cceeb201fe2d09c81206c51e06795402a571

  • SSDEEP

    12288:os1SCUO8keSbA4gHonlbtisFbFv791t4m9+crhJ/NrkJ:9YCUcbk4gHYscVhR9tP4J

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://195.3.146.183:4447/EV75sFito25oPWk8DBZCxgQITZY2hgh9YN5Nx5X6ALweYKZCiBFB7yrsmAgrwpmyvt38qIXpzgoKEduuKhEdbGNbPxPw32eHxkXKd0E61TKJ7CaVExv2K2djHt45R3tSEUwbnfeNvK8PBfiJYeOS0S-XVeniQTZvlQUtgVte3njfZDB1jJyH3_53hQk7Fr7PQGeAr_9RDZbZOLFynIwUM7FqZt84qUMlaqVaqPrtIr

Targets

    • Target

      8c2df8d2fa1a69b0945fbf3ddf64eb1b1fa930c05c3b850c77df658f62fa83b3.exe

    • Size

      561KB

    • MD5

      56113c5a46eaa50811e58263c64e28aa

    • SHA1

      b6dbf9ce47afbae483ad22acc66d2e281a248109

    • SHA256

      8c2df8d2fa1a69b0945fbf3ddf64eb1b1fa930c05c3b850c77df658f62fa83b3

    • SHA512

      655d2c7b716a4035c0a6360ef6cab3c411a6d21d8c9837674fe75e704921c3f71e5de7418be3e04eb7a4c4a8b843cceeb201fe2d09c81206c51e06795402a571

    • SSDEEP

      12288:os1SCUO8keSbA4gHonlbtisFbFv791t4m9+crhJ/NrkJ:9YCUcbk4gHYscVhR9tP4J

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks