General

  • Target

    NEAS.40d092021fff22faddd0fb379d13fb90.exe

  • Size

    72KB

  • Sample

    231021-z5q9qaec25

  • MD5

    40d092021fff22faddd0fb379d13fb90

  • SHA1

    b97d1dbce73a8da99d7950bfe32d134d34f8c195

  • SHA256

    0ab0cdc23ee6066078bae6e72820ab07de342774b880bda014674c95c98399bc

  • SHA512

    38bb22c87ebb4b65481709508f10eebbb7b21a9c1e7969ce97d11d91b81f8a75f818b64b958698d70aa0daef0d6c84ae5ad5d696bede4ee852fd1805162c83ff

  • SSDEEP

    1536:IwjhWJIVFq7uBNzb7ynNtAqsPKMb+KR0Nc8QsJq39:FoMBNzqNePKe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.211.55.2:3333

Targets

    • Target

      NEAS.40d092021fff22faddd0fb379d13fb90.exe

    • Size

      72KB

    • MD5

      40d092021fff22faddd0fb379d13fb90

    • SHA1

      b97d1dbce73a8da99d7950bfe32d134d34f8c195

    • SHA256

      0ab0cdc23ee6066078bae6e72820ab07de342774b880bda014674c95c98399bc

    • SHA512

      38bb22c87ebb4b65481709508f10eebbb7b21a9c1e7969ce97d11d91b81f8a75f818b64b958698d70aa0daef0d6c84ae5ad5d696bede4ee852fd1805162c83ff

    • SSDEEP

      1536:IwjhWJIVFq7uBNzb7ynNtAqsPKMb+KR0Nc8QsJq39:FoMBNzqNePKe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks