General

  • Target

    virus.exe

  • Size

    7KB

  • Sample

    231101-nw71bshg59

  • MD5

    447ffe4ea687671c0db4a626302fe970

  • SHA1

    587667ba937e4840cd1146e69682fc337c7d7dd8

  • SHA256

    4964c222de03bc6582ba5cced50b5aa9f61d1bc9c9d0107ed99f10a142d094f5

  • SHA512

    b33ee963541904870e003947d148ccca1fcd9925cc1c32b28f1541674c40e1e9461262d4e15d1d66936477f1c08b9a548cdd5badc1ea755f96680ca878ba875c

  • SSDEEP

    24:eFGStrJ9u0/6h2nPnZdkBQAVtY+4YKZqseNDMSCvOXpmB:is0FrkBQt+4YaSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.105.106.242:4444

Targets

    • Target

      virus.exe

    • Size

      7KB

    • MD5

      447ffe4ea687671c0db4a626302fe970

    • SHA1

      587667ba937e4840cd1146e69682fc337c7d7dd8

    • SHA256

      4964c222de03bc6582ba5cced50b5aa9f61d1bc9c9d0107ed99f10a142d094f5

    • SHA512

      b33ee963541904870e003947d148ccca1fcd9925cc1c32b28f1541674c40e1e9461262d4e15d1d66936477f1c08b9a548cdd5badc1ea755f96680ca878ba875c

    • SSDEEP

      24:eFGStrJ9u0/6h2nPnZdkBQAVtY+4YKZqseNDMSCvOXpmB:is0FrkBQt+4YaSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks