General

  • Target

    javaw.exe

  • Size

    7KB

  • Sample

    220615-r5vm5sbfdm

  • MD5

    00444f498cad8ff2ff8f0ac20f7d5fd7

  • SHA1

    061764179ddb3c19fd8044605e55b3407187a54e

  • SHA256

    a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06

  • SHA512

    902e9c3ba6275fb8b3047a6b31567004ca8b0fe68f19110d424e63b04d336a0b31c8e8209c98fb6dd0c77c597b6f51e7e75ad88a753c4557a8ee945af4122fd0

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

3.70.110.188:52509

Targets

    • Target

      javaw.exe

    • Size

      7KB

    • MD5

      00444f498cad8ff2ff8f0ac20f7d5fd7

    • SHA1

      061764179ddb3c19fd8044605e55b3407187a54e

    • SHA256

      a3b14096156684a6aed44851c7c9d1fbe64e7926cbdf57317f083f0ca1ae4d06

    • SHA512

      902e9c3ba6275fb8b3047a6b31567004ca8b0fe68f19110d424e63b04d336a0b31c8e8209c98fb6dd0c77c597b6f51e7e75ad88a753c4557a8ee945af4122fd0

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks