General

  • Target

    6bf359f7ae51aab5b7713813edd33172.exe

  • Size

    72KB

  • Sample

    230314-gr57lsdg67

  • MD5

    6bf359f7ae51aab5b7713813edd33172

  • SHA1

    ad236b9b8dd7ec0b34d8a7c7165895787e49f8fc

  • SHA256

    fde583b9745cb25492b27659a9e0b4ca38bde9505f8e3d1501a9c3a0cc6aba64

  • SHA512

    8ee5f7836eef94553bab0cc7bd3df4e60e226f28b12d2e70e2d4e41ee22fef9ef4f1713853d5af08977318b275e7f2eefc8262ad7dbb8d86eb8d8cc0cb725cfb

  • SSDEEP

    1536:I4/rh37Kui/GKXGjxpurNatodWkQlMb+KR0Nc8QsJq39:R/rh149XG1pyNUSWkQle0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.141.126.222:28193

Targets

    • Target

      6bf359f7ae51aab5b7713813edd33172.exe

    • Size

      72KB

    • MD5

      6bf359f7ae51aab5b7713813edd33172

    • SHA1

      ad236b9b8dd7ec0b34d8a7c7165895787e49f8fc

    • SHA256

      fde583b9745cb25492b27659a9e0b4ca38bde9505f8e3d1501a9c3a0cc6aba64

    • SHA512

      8ee5f7836eef94553bab0cc7bd3df4e60e226f28b12d2e70e2d4e41ee22fef9ef4f1713853d5af08977318b275e7f2eefc8262ad7dbb8d86eb8d8cc0cb725cfb

    • SSDEEP

      1536:I4/rh37Kui/GKXGjxpurNatodWkQlMb+KR0Nc8QsJq39:R/rh149XG1pyNUSWkQle0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks