General

  • Target

    fde50d772933f871c8e67d7f2c44981b8740593f9dd5a12ef6fbe52f2f531492.ps1

  • Size

    3KB

  • Sample

    240307-fvryqaef39

  • MD5

    cfe4ec997d9c91c46f8fbcbd4936d593

  • SHA1

    bc1dd4885d8ce4f80f16cd64b1bf8472f1e24f0b

  • SHA256

    fde50d772933f871c8e67d7f2c44981b8740593f9dd5a12ef6fbe52f2f531492

  • SHA512

    a43ff186e36561b0f3a00a407e134dd2abf202fda8c4b02ace78a39fedfa1120f02263b5c8e5a2af0b47726697c9dcb62b5178b71062048de511ea80646e199e

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

18.176.183.3:14612

Targets

    • Target

      fde50d772933f871c8e67d7f2c44981b8740593f9dd5a12ef6fbe52f2f531492.ps1

    • Size

      3KB

    • MD5

      cfe4ec997d9c91c46f8fbcbd4936d593

    • SHA1

      bc1dd4885d8ce4f80f16cd64b1bf8472f1e24f0b

    • SHA256

      fde50d772933f871c8e67d7f2c44981b8740593f9dd5a12ef6fbe52f2f531492

    • SHA512

      a43ff186e36561b0f3a00a407e134dd2abf202fda8c4b02ace78a39fedfa1120f02263b5c8e5a2af0b47726697c9dcb62b5178b71062048de511ea80646e199e

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks