General

  • Target

    7d364486282aefa0cfe07d0ce4dbea41cf15ef9219790cd7906208f288da3758N.exe

  • Size

    72KB

  • Sample

    241216-fc4vkawndq

  • MD5

    dcd27503e677e2255cb6e546a1fa3b70

  • SHA1

    8252c39377d1f63a123acae0cb93f60905d47c45

  • SHA256

    7d364486282aefa0cfe07d0ce4dbea41cf15ef9219790cd7906208f288da3758

  • SHA512

    c1c64872425a222730aa9a5d62beba4a4a3c670e3b58b1e56d585bc4f9c56091646d02a35f29e05591f634a6ec77de35bfa9ae9d6028411a9667a56af39f4116

  • SSDEEP

    1536:IAHtxP2AgC6RhvG+bwMbIY1Xror+HO8RPfkK9Mb+KR0Nc8QsJq39:xHHuAgXRUSPseO8Rkye0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.9.187:8888

Targets

    • Target

      7d364486282aefa0cfe07d0ce4dbea41cf15ef9219790cd7906208f288da3758N.exe

    • Size

      72KB

    • MD5

      dcd27503e677e2255cb6e546a1fa3b70

    • SHA1

      8252c39377d1f63a123acae0cb93f60905d47c45

    • SHA256

      7d364486282aefa0cfe07d0ce4dbea41cf15ef9219790cd7906208f288da3758

    • SHA512

      c1c64872425a222730aa9a5d62beba4a4a3c670e3b58b1e56d585bc4f9c56091646d02a35f29e05591f634a6ec77de35bfa9ae9d6028411a9667a56af39f4116

    • SSDEEP

      1536:IAHtxP2AgC6RhvG+bwMbIY1Xror+HO8RPfkK9Mb+KR0Nc8QsJq39:xHHuAgXRUSPseO8Rkye0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks