General

  • Target

    8284395436cad3120784ba3af14a517bea32545ad1e7ac44d459c8087bb43de3

  • Size

    10KB

  • Sample

    241206-sh2cvayqem

  • MD5

    71697ace94611c155b6fb7a7ad5f7239

  • SHA1

    ed2c26922702c2f5d8c898ce732fbfa93f1483d5

  • SHA256

    8284395436cad3120784ba3af14a517bea32545ad1e7ac44d459c8087bb43de3

  • SHA512

    db5b663ef7a1c536c1f00119449aff8f3fa998e8bf0cf1f382710d5f778b90b23d00df784289edd0fe8b7974599ddbf62eac214f1f17101703e25e30b9930e94

  • SSDEEP

    192:LZVzkBpFuI8/ZSxHRlUWGIJtGv5V07E5pz6fMAWe6O:LZ5kBR8RSxHRlUrkGn07vWe6

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.196.144:456

Targets

    • Target

      8284395436cad3120784ba3af14a517bea32545ad1e7ac44d459c8087bb43de3

    • Size

      10KB

    • MD5

      71697ace94611c155b6fb7a7ad5f7239

    • SHA1

      ed2c26922702c2f5d8c898ce732fbfa93f1483d5

    • SHA256

      8284395436cad3120784ba3af14a517bea32545ad1e7ac44d459c8087bb43de3

    • SHA512

      db5b663ef7a1c536c1f00119449aff8f3fa998e8bf0cf1f382710d5f778b90b23d00df784289edd0fe8b7974599ddbf62eac214f1f17101703e25e30b9930e94

    • SSDEEP

      192:LZVzkBpFuI8/ZSxHRlUWGIJtGv5V07E5pz6fMAWe6O:LZ5kBR8RSxHRlUrkGn07vWe6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks