General

  • Target

    NEAS.38842dc85811ff7401391a38e81aba50.exe

  • Size

    72KB

  • Sample

    231102-t7n99aaa93

  • MD5

    38842dc85811ff7401391a38e81aba50

  • SHA1

    dfdc23d8a00d1f9b0a2cb2554320a80c33204dc0

  • SHA256

    5e21714d142480c6d60f0d2cbcfb7c21bb54084346a7a7a6fdef14aaa57cddaf

  • SHA512

    c07b4e60212a637ca630e0dee03ec390f1e497940e1c0d57da820e755c69722d11331b028a7cfc2f555770a56e7962467a38177425bd438475b29bff604dcb8c

  • SSDEEP

    1536:IQjPqGVSzE54zcimjZvv3K2p5qe2qiipdgrRfkyEcGMb+KR0Nc8QsJq39:XSzE54Qbtvwi+r5Tse0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp_dns

C2

26.154.251.183:6824

Targets

    • Target

      NEAS.38842dc85811ff7401391a38e81aba50.exe

    • Size

      72KB

    • MD5

      38842dc85811ff7401391a38e81aba50

    • SHA1

      dfdc23d8a00d1f9b0a2cb2554320a80c33204dc0

    • SHA256

      5e21714d142480c6d60f0d2cbcfb7c21bb54084346a7a7a6fdef14aaa57cddaf

    • SHA512

      c07b4e60212a637ca630e0dee03ec390f1e497940e1c0d57da820e755c69722d11331b028a7cfc2f555770a56e7962467a38177425bd438475b29bff604dcb8c

    • SSDEEP

      1536:IQjPqGVSzE54zcimjZvv3K2p5qe2qiipdgrRfkyEcGMb+KR0Nc8QsJq39:XSzE54Qbtvwi+r5Tse0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks