General

  • Target

    payload_meterpreter_7.exe

  • Size

    72KB

  • Sample

    240416-zmrgrsdh3v

  • MD5

    83c4385008258ca4cd716bbea8fd1a50

  • SHA1

    080cc82da4cc91b2da6d9a0c2cffb1538b8a80a0

  • SHA256

    223ffa433562c46449f2eb7d7749d193a781c82add9a4bd8f39407bbe66fc518

  • SHA512

    dd40c2d474e88b1c4bbe11f2b5d3d7b14c6b14132c5e91da7d1eaf73ded2b51bfedc351a41b335e3972bd45055759545ba1cfaa7e33d6ee11c689ee894c93dbb

  • SSDEEP

    1536:Is7CYi+/CtY7Z8W+SxmSUrkeU3Mb+KR0Nc8QsJq39:VNiSCxrumXrue0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.100:4444

Targets

    • Target

      payload_meterpreter_7.exe

    • Size

      72KB

    • MD5

      83c4385008258ca4cd716bbea8fd1a50

    • SHA1

      080cc82da4cc91b2da6d9a0c2cffb1538b8a80a0

    • SHA256

      223ffa433562c46449f2eb7d7749d193a781c82add9a4bd8f39407bbe66fc518

    • SHA512

      dd40c2d474e88b1c4bbe11f2b5d3d7b14c6b14132c5e91da7d1eaf73ded2b51bfedc351a41b335e3972bd45055759545ba1cfaa7e33d6ee11c689ee894c93dbb

    • SSDEEP

      1536:Is7CYi+/CtY7Z8W+SxmSUrkeU3Mb+KR0Nc8QsJq39:VNiSCxrumXrue0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks