General

  • Target

    ubuntu4444.exe

  • Size

    7KB

  • Sample

    240423-nte7jafg98

  • MD5

    bff8cf486fa72c4c20743df8339753c7

  • SHA1

    9bf03fe9b66a083d7389d08eac7fe5d361cfb12e

  • SHA256

    b64ded9cedd9f5b0f0b9f886996f3d09502f73a7b52d24a922185cdbb995f424

  • SHA512

    9dbd990294a50e18abfa544b42bb60fdf6178649a6b38814295a4e36248cb2eedc6ab95364c7ba57c4527a69ea764aca532987101450cd09cc234b4c8d92bbff

  • SSDEEP

    24:eFGStrJ9u0/6U2SnZdkBQAVAWbKLq32eNDMSCvOXpmB:is06qkBQcmSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.234.107.156:4444

Targets

    • Target

      ubuntu4444.exe

    • Size

      7KB

    • MD5

      bff8cf486fa72c4c20743df8339753c7

    • SHA1

      9bf03fe9b66a083d7389d08eac7fe5d361cfb12e

    • SHA256

      b64ded9cedd9f5b0f0b9f886996f3d09502f73a7b52d24a922185cdbb995f424

    • SHA512

      9dbd990294a50e18abfa544b42bb60fdf6178649a6b38814295a4e36248cb2eedc6ab95364c7ba57c4527a69ea764aca532987101450cd09cc234b4c8d92bbff

    • SSDEEP

      24:eFGStrJ9u0/6U2SnZdkBQAVAWbKLq32eNDMSCvOXpmB:is06qkBQcmSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks