General

  • Target

    67dcfc8af408e8bf57d3260d47ba6b9a374f2b56e3f03cfb2fac7ccac9ea6dde

  • Size

    5.3MB

  • Sample

    231117-mq85rsgg73

  • MD5

    c65e71d882a37d995b6494ba00060ce9

  • SHA1

    600e74ec14dbf788e7101e56b40de12e2b39b59d

  • SHA256

    67dcfc8af408e8bf57d3260d47ba6b9a374f2b56e3f03cfb2fac7ccac9ea6dde

  • SHA512

    b16d3e75ac8ce3c0dce9aa184009d009f34763bc5c7396bae38598988818ce9ed5a6a260f458aacb6c5e0e8c219968ae72db15b8ad8a0e5da65256ab576504ad

  • SSDEEP

    98304:xDIYIJbLpzoLLJ3TbwaVvrZE0Idx1F4fTLYwjqJFJGluFcguhaW4+r7VGqIoq5:x0L9onJ5hrZERn+ENFJzFcguwWtFbI

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.112.216:4444

Targets

    • Target

      67dcfc8af408e8bf57d3260d47ba6b9a374f2b56e3f03cfb2fac7ccac9ea6dde

    • Size

      5.3MB

    • MD5

      c65e71d882a37d995b6494ba00060ce9

    • SHA1

      600e74ec14dbf788e7101e56b40de12e2b39b59d

    • SHA256

      67dcfc8af408e8bf57d3260d47ba6b9a374f2b56e3f03cfb2fac7ccac9ea6dde

    • SHA512

      b16d3e75ac8ce3c0dce9aa184009d009f34763bc5c7396bae38598988818ce9ed5a6a260f458aacb6c5e0e8c219968ae72db15b8ad8a0e5da65256ab576504ad

    • SSDEEP

      98304:xDIYIJbLpzoLLJ3TbwaVvrZE0Idx1F4fTLYwjqJFJGluFcguhaW4+r7VGqIoq5:x0L9onJ5hrZERn+ENFJzFcguwWtFbI

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks