General

  • Target

    shell7000.exe

  • Size

    7KB

  • Sample

    240406-nvb69shd9s

  • MD5

    dbdb87781b1a27c5fc94815b9705ad55

  • SHA1

    45fa5fbb543315d2cfbc0ae85afb71f6f5d5d8cd

  • SHA256

    59976e5abfff0a1137e50a7f0d9fbbab07e0390ca79d0d72e84e2aaabc5dcc3c

  • SHA512

    91e443f02d83abca6fd2876ad82c1111411dbcf056fb2eb3fe0791eb7c312e0b99019af0c7272e22978c72038cff2f08da3071e221063a7b639d8275e8c67595

  • SSDEEP

    24:eFGStrJ9u0/6NanZdkBQAVMWY+JKZqJeNDMSCvOXpmB:is0ASkBQD+J3SD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.49.107:7000

Targets

    • Target

      shell7000.exe

    • Size

      7KB

    • MD5

      dbdb87781b1a27c5fc94815b9705ad55

    • SHA1

      45fa5fbb543315d2cfbc0ae85afb71f6f5d5d8cd

    • SHA256

      59976e5abfff0a1137e50a7f0d9fbbab07e0390ca79d0d72e84e2aaabc5dcc3c

    • SHA512

      91e443f02d83abca6fd2876ad82c1111411dbcf056fb2eb3fe0791eb7c312e0b99019af0c7272e22978c72038cff2f08da3071e221063a7b639d8275e8c67595

    • SSDEEP

      24:eFGStrJ9u0/6NanZdkBQAVMWY+JKZqJeNDMSCvOXpmB:is0ASkBQD+J3SD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks