General

  • Target

    2f2e4cbc47dd95f4bc5a3c5954eb7030.bin

  • Size

    72KB

  • Sample

    240516-cf2mtsfg77

  • MD5

    2f2e4cbc47dd95f4bc5a3c5954eb7030

  • SHA1

    0044191388caf8286e962db5f0a79b4756bbd50c

  • SHA256

    5da992ebe312af40c8596f0fe3f1fc6bbe1aca1d49a907aaf7625aadf8ce7d66

  • SHA512

    b01250935e32c7ec650b6f8e15729ad0675f350dbb0e0f85c88546ed4cf24ae6315b7ad7ab808004f2a0be49202ef6a600cc178917942361c2a9460a6350b5b3

  • SSDEEP

    1536:ImmQLjSoMmfiJm3MSMq6/b9YIEKbyMb+KR0Nc8QsJq39:AQLxMLm34ZxZEKWe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.2.44:8000

Targets

    • Target

      2f2e4cbc47dd95f4bc5a3c5954eb7030.bin

    • Size

      72KB

    • MD5

      2f2e4cbc47dd95f4bc5a3c5954eb7030

    • SHA1

      0044191388caf8286e962db5f0a79b4756bbd50c

    • SHA256

      5da992ebe312af40c8596f0fe3f1fc6bbe1aca1d49a907aaf7625aadf8ce7d66

    • SHA512

      b01250935e32c7ec650b6f8e15729ad0675f350dbb0e0f85c88546ed4cf24ae6315b7ad7ab808004f2a0be49202ef6a600cc178917942361c2a9460a6350b5b3

    • SSDEEP

      1536:ImmQLjSoMmfiJm3MSMq6/b9YIEKbyMb+KR0Nc8QsJq39:AQLxMLm34ZxZEKWe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks