General

  • Target

    9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d

  • Size

    72KB

  • Sample

    241209-bn1vtsskbn

  • MD5

    d5e72faa60ef45ef96f65ea2a51ca1d4

  • SHA1

    cb0c8636cbc5dff662af4c414182428268400bd2

  • SHA256

    9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d

  • SHA512

    5a4543796389a729525640827ca69113c38f3a6e24a2f0d5964db4207fe96724a74d9742b4ad82dd177577c6818df1b1d4b4b7f2970168e3fb459bfcc270e2a6

  • SSDEEP

    1536:I/n0UiyOOgdRGoJyarVils00Mb+KR0Nc8QsJq3f:2V0OgpyxqNe0Nc8QsCf

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Targets

    • Target

      9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d

    • Size

      72KB

    • MD5

      d5e72faa60ef45ef96f65ea2a51ca1d4

    • SHA1

      cb0c8636cbc5dff662af4c414182428268400bd2

    • SHA256

      9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d

    • SHA512

      5a4543796389a729525640827ca69113c38f3a6e24a2f0d5964db4207fe96724a74d9742b4ad82dd177577c6818df1b1d4b4b7f2970168e3fb459bfcc270e2a6

    • SSDEEP

      1536:I/n0UiyOOgdRGoJyarVils00Mb+KR0Nc8QsJq3f:2V0OgpyxqNe0Nc8QsCf

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks