General

  • Target

    b62ae5fe3101a5d12da9af1710ada3072c13b13ebb0016cec41db40cc0a2e96b

  • Size

    1.6MB

  • Sample

    240423-ewlyesch5v

  • MD5

    582fa027f49a1aadbc67a448d5248419

  • SHA1

    3c2ebe7889235debb84a7d57440d6abefdfcebcc

  • SHA256

    b62ae5fe3101a5d12da9af1710ada3072c13b13ebb0016cec41db40cc0a2e96b

  • SHA512

    8a60986ddc908fa64d423cc74e87960b700504d53097b3ea0e2fded2846c575a6d8c0fe1d6bd8f6376e54af84777e7ed11aaa739a51a8ecaf1b3277c1de2c015

  • SSDEEP

    24576:YdtM6ffTFM1nKwyhGXK6zj6FQvY5PQz1+t/5Z:6ZbFcKrYQL5PQp+x

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.4.126:3333

Targets

    • Target

      b62ae5fe3101a5d12da9af1710ada3072c13b13ebb0016cec41db40cc0a2e96b

    • Size

      1.6MB

    • MD5

      582fa027f49a1aadbc67a448d5248419

    • SHA1

      3c2ebe7889235debb84a7d57440d6abefdfcebcc

    • SHA256

      b62ae5fe3101a5d12da9af1710ada3072c13b13ebb0016cec41db40cc0a2e96b

    • SHA512

      8a60986ddc908fa64d423cc74e87960b700504d53097b3ea0e2fded2846c575a6d8c0fe1d6bd8f6376e54af84777e7ed11aaa739a51a8ecaf1b3277c1de2c015

    • SSDEEP

      24576:YdtM6ffTFM1nKwyhGXK6zj6FQvY5PQz1+t/5Z:6ZbFcKrYQL5PQp+x

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks