General

  • Target

    123.exe

  • Size

    72KB

  • Sample

    240420-pjezfshc4z

  • MD5

    bdef7408bf3cbfe6092e7d2eb60d338f

  • SHA1

    abee68ec1d7885585b63008dae23f23a800a8b56

  • SHA256

    73a266c516feb79d3ee190ad0ec0d72a838d020017a2478b82929372481dac24

  • SHA512

    2ce1337b55bad61e5c9d4b82ebe9bddeed5e4a6f10bab755aa125512fa8d0ffef6861e7b71bd367f156d27a42aba2b1250c67fb13b6498c056656ba959644d30

  • SSDEEP

    1536:IiHeF+V7dOUF5vVIEzJlAAiMj/7iI1XLMb+KR0Nc8QsJq39:z6+Vhv5vzzJWM3iIVLe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.110:4444

Targets

    • Target

      123.exe

    • Size

      72KB

    • MD5

      bdef7408bf3cbfe6092e7d2eb60d338f

    • SHA1

      abee68ec1d7885585b63008dae23f23a800a8b56

    • SHA256

      73a266c516feb79d3ee190ad0ec0d72a838d020017a2478b82929372481dac24

    • SHA512

      2ce1337b55bad61e5c9d4b82ebe9bddeed5e4a6f10bab755aa125512fa8d0ffef6861e7b71bd367f156d27a42aba2b1250c67fb13b6498c056656ba959644d30

    • SSDEEP

      1536:IiHeF+V7dOUF5vVIEzJlAAiMj/7iI1XLMb+KR0Nc8QsJq39:z6+Vhv5vzzJWM3iIVLe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks