General

  • Target

    reverse.exe

  • Size

    7KB

  • Sample

    231029-pk5aqsfg5s

  • MD5

    cedc316a75f461facb72511004041ebe

  • SHA1

    c8cfb6ec83d6dd1a0cca2d749c9c52016c802dc0

  • SHA256

    eaee4fbde88845b024e5bacc896fbeda04e6784e8d1314a24ec9b3d2edef8fa2

  • SHA512

    21ace230e5a6cf57b459ec62e2cb848f38ffc8eebfc909b30917d498a57b1b01e29ef72d0ae93a2dbd3ff5f17fef4c5be141fcb4af38ef7851cc3746fba33e08

  • SSDEEP

    24:eFGStrJ9u0/6UFxnZdkBQAVAWYYKZq2eNDMSCvOXpmB:is0NFBkBQjYoSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

5.252.176.77:45098

Targets

    • Target

      reverse.exe

    • Size

      7KB

    • MD5

      cedc316a75f461facb72511004041ebe

    • SHA1

      c8cfb6ec83d6dd1a0cca2d749c9c52016c802dc0

    • SHA256

      eaee4fbde88845b024e5bacc896fbeda04e6784e8d1314a24ec9b3d2edef8fa2

    • SHA512

      21ace230e5a6cf57b459ec62e2cb848f38ffc8eebfc909b30917d498a57b1b01e29ef72d0ae93a2dbd3ff5f17fef4c5be141fcb4af38ef7851cc3746fba33e08

    • SSDEEP

      24:eFGStrJ9u0/6UFxnZdkBQAVAWYYKZq2eNDMSCvOXpmB:is0NFBkBQjYoSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks