General

  • Target

    9999.exe

  • Size

    7KB

  • Sample

    240316-nzxzjaad8x

  • MD5

    829cbae6aeab973d2808d9334d2037c4

  • SHA1

    593cf184867a6cd2a3447f444f29faa77e50612a

  • SHA256

    bd0cc67bc1602465831fd558053588d4e192a2ad1e8b54998b7fedad3ef68d27

  • SHA512

    235444d5a75a14ada10802b58901bff059417bb622bb6f5f2d194439e6e75e4962813066bd2928ab58ad271949db3228e895b4832a2e51a3cfd4ebf4316255f8

  • SSDEEP

    24:eFGStrJ9u0/6UrnZdkBQAV7k+WwKZqF2eNDMSCvOXpmB:is0NXkBQP+WwmSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

127.0.0.1:9999

Targets

    • Target

      9999.exe

    • Size

      7KB

    • MD5

      829cbae6aeab973d2808d9334d2037c4

    • SHA1

      593cf184867a6cd2a3447f444f29faa77e50612a

    • SHA256

      bd0cc67bc1602465831fd558053588d4e192a2ad1e8b54998b7fedad3ef68d27

    • SHA512

      235444d5a75a14ada10802b58901bff059417bb622bb6f5f2d194439e6e75e4962813066bd2928ab58ad271949db3228e895b4832a2e51a3cfd4ebf4316255f8

    • SSDEEP

      24:eFGStrJ9u0/6UrnZdkBQAV7k+WwKZqF2eNDMSCvOXpmB:is0NXkBQP+WwmSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks