General

  • Target

    6a9109ad1bc3787d6a905eb7189d711126400076f21b396e94985ca17b6302cf

  • Size

    1.2MB

  • Sample

    241205-spq6fszmhy

  • MD5

    44b8dc70c4158de50c0fcf73d2ad9c7b

  • SHA1

    2858f66fcaadce630e7ef46dcc8cfdc82287d76c

  • SHA256

    6a9109ad1bc3787d6a905eb7189d711126400076f21b396e94985ca17b6302cf

  • SHA512

    cf0025932ae02e05f6c8ca8ed383fdb83c4adcfd3f3dfeab536360d4f9d38dbfe2e0ebabcd342a92ac5994f8f628ed7d747659c6d0ef366b149a6cf255ce3b06

  • SSDEEP

    24576:qDme1dGbHjJhxaGyzuBmA84I2EcEjTZnhgzyjodwhtF5EFyindsXmH:+meU1aGyKONcEjTZnqzZeTF5EFyqh

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

124.248.69.230:29782

Targets

    • Target

      6a9109ad1bc3787d6a905eb7189d711126400076f21b396e94985ca17b6302cf

    • Size

      1.2MB

    • MD5

      44b8dc70c4158de50c0fcf73d2ad9c7b

    • SHA1

      2858f66fcaadce630e7ef46dcc8cfdc82287d76c

    • SHA256

      6a9109ad1bc3787d6a905eb7189d711126400076f21b396e94985ca17b6302cf

    • SHA512

      cf0025932ae02e05f6c8ca8ed383fdb83c4adcfd3f3dfeab536360d4f9d38dbfe2e0ebabcd342a92ac5994f8f628ed7d747659c6d0ef366b149a6cf255ce3b06

    • SSDEEP

      24576:qDme1dGbHjJhxaGyzuBmA84I2EcEjTZnhgzyjodwhtF5EFyindsXmH:+meU1aGyKONcEjTZnqzZeTF5EFyqh

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks