General

  • Target

    87926c2434f028fa21b8cc975621f99d944ba8b84876d6a5f112171ee270f71d

  • Size

    72KB

  • Sample

    241220-dmjahaxnht

  • MD5

    42b7b29398e09350c351ca590c6cb18a

  • SHA1

    fca228df2aa90cf3d79aeee2664b55107ce7967f

  • SHA256

    87926c2434f028fa21b8cc975621f99d944ba8b84876d6a5f112171ee270f71d

  • SHA512

    be454ca902ac48201080899e8b78b88d8d057cf247ccf74211d9ae07a308cd19e093ab49163eb3655b4042e0de4207d12879ebff0862f1d5b833b31062b27576

  • SSDEEP

    1536:IOOtRoYTSbMXcQjO5A3dOXDYzcj9tU8oiFNAMb+KR0Nc8QsJq39:+txe4XcQjUgOTMJ8jNAe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.88.15:9090

Targets

    • Target

      87926c2434f028fa21b8cc975621f99d944ba8b84876d6a5f112171ee270f71d

    • Size

      72KB

    • MD5

      42b7b29398e09350c351ca590c6cb18a

    • SHA1

      fca228df2aa90cf3d79aeee2664b55107ce7967f

    • SHA256

      87926c2434f028fa21b8cc975621f99d944ba8b84876d6a5f112171ee270f71d

    • SHA512

      be454ca902ac48201080899e8b78b88d8d057cf247ccf74211d9ae07a308cd19e093ab49163eb3655b4042e0de4207d12879ebff0862f1d5b833b31062b27576

    • SSDEEP

      1536:IOOtRoYTSbMXcQjO5A3dOXDYzcj9tU8oiFNAMb+KR0Nc8QsJq39:+txe4XcQjUgOTMJ8jNAe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks