General

  • Target

    e4b785da0188d68ba8a6a5639648fff6ba092286a8fa6b1364ef072179fc582c

  • Size

    72KB

  • Sample

    241206-v52cgavkfq

  • MD5

    6927bb9f5d625a5dadc6969cfe976fe2

  • SHA1

    b7083a29e2a71668a280e8fa87414a37ca36465c

  • SHA256

    e4b785da0188d68ba8a6a5639648fff6ba092286a8fa6b1364ef072179fc582c

  • SHA512

    88fb27a7383d1e891c971f1f924b7f528029065610dd26074116130e822fe668e7971d020b42987051cb45c281fd03a2e749de42bc763a7af023d18d927c450e

  • SSDEEP

    1536:IlSpeZ46IyTQJJPyD3WehAd+XIWIMb+KR0Nc8QsJq39:0TZ5IyTQJgDGzoIWIe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

45.202.35.85:6615

Targets

    • Target

      e4b785da0188d68ba8a6a5639648fff6ba092286a8fa6b1364ef072179fc582c

    • Size

      72KB

    • MD5

      6927bb9f5d625a5dadc6969cfe976fe2

    • SHA1

      b7083a29e2a71668a280e8fa87414a37ca36465c

    • SHA256

      e4b785da0188d68ba8a6a5639648fff6ba092286a8fa6b1364ef072179fc582c

    • SHA512

      88fb27a7383d1e891c971f1f924b7f528029065610dd26074116130e822fe668e7971d020b42987051cb45c281fd03a2e749de42bc763a7af023d18d927c450e

    • SSDEEP

      1536:IlSpeZ46IyTQJJPyD3WehAd+XIWIMb+KR0Nc8QsJq39:0TZ5IyTQJgDGzoIWIe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks