General

  • Target

    msf.exe

  • Size

    72KB

  • Sample

    240420-lpwbvaec8y

  • MD5

    2e42b2dbc14ad4f85b2bb36519ea547e

  • SHA1

    1de41a69af3a59cc0edf3018956fc394454d5612

  • SHA256

    5935d19a59b78faeff58c5da6bbe970451fb9ea68108cf11e5b063321b09b5fd

  • SHA512

    8329dac7c27408b2e926586fc07d6a42036f5a51f6646a05c8ae1f8c3ef3771136d1404fd8e57f4e06469142cad0f4d3149bd4edb44efd338deb3ec8bd38ce08

  • SSDEEP

    1536:I87feBgsVQBxVrtlD9R9a4M3qJmMb+KR0Nc8QsJq39:RbwSbbkAme0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

137.220.197.148:4433

Targets

    • Target

      msf.exe

    • Size

      72KB

    • MD5

      2e42b2dbc14ad4f85b2bb36519ea547e

    • SHA1

      1de41a69af3a59cc0edf3018956fc394454d5612

    • SHA256

      5935d19a59b78faeff58c5da6bbe970451fb9ea68108cf11e5b063321b09b5fd

    • SHA512

      8329dac7c27408b2e926586fc07d6a42036f5a51f6646a05c8ae1f8c3ef3771136d1404fd8e57f4e06469142cad0f4d3149bd4edb44efd338deb3ec8bd38ce08

    • SSDEEP

      1536:I87feBgsVQBxVrtlD9R9a4M3qJmMb+KR0Nc8QsJq39:RbwSbbkAme0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks