General

  • Target

    3f78946257322c549cee36206ed4be8cab569ebcb7c05d13259deaba543183bb

  • Size

    1.2MB

  • Sample

    241205-tlmvasxraq

  • MD5

    10eca828f2b46fb55cf7932ed26d49a4

  • SHA1

    04858b0ec469067ffb0afe1a16383d310dd188a8

  • SHA256

    3f78946257322c549cee36206ed4be8cab569ebcb7c05d13259deaba543183bb

  • SHA512

    acac8bfa1630b781c217ff1e41d7d490c6d1f79c72e31411cc0c2d90b137962fc80d5e19ee00e1f19c1150f803b64714dea7b83e993e3476caed826e0dedb8d4

  • SSDEEP

    24576:henBk0li9PL64akL+eyxj6YEsZsENP0fYXQztIej6LDR0L:YnBk0ymdNemkVEJMyQzLqKL

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

124.248.69.230:29782

Targets

    • Target

      3f78946257322c549cee36206ed4be8cab569ebcb7c05d13259deaba543183bb

    • Size

      1.2MB

    • MD5

      10eca828f2b46fb55cf7932ed26d49a4

    • SHA1

      04858b0ec469067ffb0afe1a16383d310dd188a8

    • SHA256

      3f78946257322c549cee36206ed4be8cab569ebcb7c05d13259deaba543183bb

    • SHA512

      acac8bfa1630b781c217ff1e41d7d490c6d1f79c72e31411cc0c2d90b137962fc80d5e19ee00e1f19c1150f803b64714dea7b83e993e3476caed826e0dedb8d4

    • SSDEEP

      24576:henBk0li9PL64akL+eyxj6YEsZsENP0fYXQztIej6LDR0L:YnBk0ymdNemkVEJMyQzLqKL

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks