General

  • Target

    c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe

  • Size

    113KB

  • Sample

    241215-lk9cxasjfp

  • MD5

    21df538bbf0d348c9b617e39d40316ee

  • SHA1

    514d2cea77ec7505870dd1de514bcd332065fc18

  • SHA256

    c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe

  • SHA512

    1ec43f61ee01fef1516a3ef8e245221a420859355380f921034086b80409384fd7ac721abc2d3cfc25e8af951a12ff9cc38787e5bebea20737fc3b856a99b208

  • SSDEEP

    3072:yEV278VGyt5r667Q/maOxWn8+BlPXzfh0k8rMVfwQQQt:yEA78Tr6Q48QlPXzZz8OV

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.80.162:8888

Targets

    • Target

      c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe

    • Size

      113KB

    • MD5

      21df538bbf0d348c9b617e39d40316ee

    • SHA1

      514d2cea77ec7505870dd1de514bcd332065fc18

    • SHA256

      c74a3f667ee332f0bd3577ee5d6d3eb78d3fc9693ac787e8a1c40e0d7f7996fe

    • SHA512

      1ec43f61ee01fef1516a3ef8e245221a420859355380f921034086b80409384fd7ac721abc2d3cfc25e8af951a12ff9cc38787e5bebea20737fc3b856a99b208

    • SSDEEP

      3072:yEV278VGyt5r667Q/maOxWn8+BlPXzfh0k8rMVfwQQQt:yEA78Tr6Q48QlPXzZz8OV

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks