General

  • Target

    ed3902a826396a555537bd3820d7ecb0b59083289b632aed66a3d2c056df438d.exe

  • Size

    340KB

  • Sample

    240102-tdv6pshcek

  • MD5

    f16a7c16409b535cc810f249415f1ca8

  • SHA1

    d87a8fb111083fff8aef2f0114b04b23add0bc5a

  • SHA256

    ed3902a826396a555537bd3820d7ecb0b59083289b632aed66a3d2c056df438d

  • SHA512

    b6d2f5562fc9d4bee0407c8492efae18c5f46b4f518ba22ec06ce117949b304f63703eaa9ce6eabae9a22873e9808384d811ac17dc81f6e3302173084030d6a0

  • SSDEEP

    1536:TqDCURqF4PrL4cfFKWItc8EsWjcd1QUI+2/6d5uUE5nq:TqDCQqqPY5rCxnw

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.127.129:4444

Targets

    • Target

      ed3902a826396a555537bd3820d7ecb0b59083289b632aed66a3d2c056df438d.exe

    • Size

      340KB

    • MD5

      f16a7c16409b535cc810f249415f1ca8

    • SHA1

      d87a8fb111083fff8aef2f0114b04b23add0bc5a

    • SHA256

      ed3902a826396a555537bd3820d7ecb0b59083289b632aed66a3d2c056df438d

    • SHA512

      b6d2f5562fc9d4bee0407c8492efae18c5f46b4f518ba22ec06ce117949b304f63703eaa9ce6eabae9a22873e9808384d811ac17dc81f6e3302173084030d6a0

    • SSDEEP

      1536:TqDCURqF4PrL4cfFKWItc8EsWjcd1QUI+2/6d5uUE5nq:TqDCQqqPY5rCxnw

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks