General

  • Target

    9709c39821899460450760d0f90a3eb029e870dc60d5a93fc5372f00a3981e27

  • Size

    3.4MB

  • Sample

    240428-mdfmpade48

  • MD5

    272c5577b502fb35da4b687956b85adc

  • SHA1

    91872d2db3bcb2c74c9699c1f9a5f8f611a94c19

  • SHA256

    9709c39821899460450760d0f90a3eb029e870dc60d5a93fc5372f00a3981e27

  • SHA512

    cf845f84924253fc37bb85cef74085bee7e2c344e09dbc0db7cc9bfd9159c0a116037195cff5670729bf822b61050ca28cb7f74d686f3d6aa6c8275925ecd958

  • SSDEEP

    24576:3LjnWJWXfGtn/RamAAvbnuhIp+O5Jloa89dwRnoWFlla8tyUJ+26tMjGmSJVizsJ:2JWPcn/1VTi2u9Anoi0tMjaiS2R5gt3

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.0.20.30:9999

Targets

    • Target

      9709c39821899460450760d0f90a3eb029e870dc60d5a93fc5372f00a3981e27

    • Size

      3.4MB

    • MD5

      272c5577b502fb35da4b687956b85adc

    • SHA1

      91872d2db3bcb2c74c9699c1f9a5f8f611a94c19

    • SHA256

      9709c39821899460450760d0f90a3eb029e870dc60d5a93fc5372f00a3981e27

    • SHA512

      cf845f84924253fc37bb85cef74085bee7e2c344e09dbc0db7cc9bfd9159c0a116037195cff5670729bf822b61050ca28cb7f74d686f3d6aa6c8275925ecd958

    • SSDEEP

      24576:3LjnWJWXfGtn/RamAAvbnuhIp+O5Jloa89dwRnoWFlla8tyUJ+26tMjGmSJVizsJ:2JWPcn/1VTi2u9Anoi0tMjaiS2R5gt3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks