General

  • Target

    NEAS.a4fafa40bfe7001d890c256f6c4456a63ba16165f37ce7763a18ae4d48ffcba2.ps1

  • Size

    3KB

  • Sample

    231111-mg5qzsed76

  • MD5

    7c8925b2280001f809a88d6e4aaa4334

  • SHA1

    995f9cad089fb6a79f3c54811cce57307ebf7147

  • SHA256

    a4fafa40bfe7001d890c256f6c4456a63ba16165f37ce7763a18ae4d48ffcba2

  • SHA512

    2b535e3b716579278d1fd22c0872cfab374ac8d940cebe7bf0ac6fae73e223a988cd56432d8e31e9f369517194e595a2c523b1b7b58aceca2e6620b23ebea2da

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

18.177.76.42:19536

Targets

    • Target

      NEAS.a4fafa40bfe7001d890c256f6c4456a63ba16165f37ce7763a18ae4d48ffcba2.ps1

    • Size

      3KB

    • MD5

      7c8925b2280001f809a88d6e4aaa4334

    • SHA1

      995f9cad089fb6a79f3c54811cce57307ebf7147

    • SHA256

      a4fafa40bfe7001d890c256f6c4456a63ba16165f37ce7763a18ae4d48ffcba2

    • SHA512

      2b535e3b716579278d1fd22c0872cfab374ac8d940cebe7bf0ac6fae73e223a988cd56432d8e31e9f369517194e595a2c523b1b7b58aceca2e6620b23ebea2da

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks