General

  • Target

    secnhack.exe

  • Size

    72KB

  • Sample

    230526-plb1ksfe35

  • MD5

    8f11186e6fdbb15d0299e93fbb730cf0

  • SHA1

    e31bfc22fd3976bda9a3636b7936315de1412a1c

  • SHA256

    c3ce48d7587e0116590d3c965c36e85e3c4d96293c8cf997e162b543baeb7e87

  • SHA512

    a7b4a1581b57ed457f260beb45cae88bb87298bbb3ce92fa1cbfca66bd5bd1da9215c6e3988f686ea4bedcb51bd97a55997f12b782a4a2b507d78d2d19334216

  • SSDEEP

    1536:ITFJA3T5LJDiUuCHwhIOaMF7I76A2JPdWXMb+KR0Nc8QsJq39:+AdViiHz72IT8oe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

209.25.141.180:36930

Targets

    • Target

      secnhack.exe

    • Size

      72KB

    • MD5

      8f11186e6fdbb15d0299e93fbb730cf0

    • SHA1

      e31bfc22fd3976bda9a3636b7936315de1412a1c

    • SHA256

      c3ce48d7587e0116590d3c965c36e85e3c4d96293c8cf997e162b543baeb7e87

    • SHA512

      a7b4a1581b57ed457f260beb45cae88bb87298bbb3ce92fa1cbfca66bd5bd1da9215c6e3988f686ea4bedcb51bd97a55997f12b782a4a2b507d78d2d19334216

    • SSDEEP

      1536:ITFJA3T5LJDiUuCHwhIOaMF7I76A2JPdWXMb+KR0Nc8QsJq39:+AdViiHz72IT8oe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks