General

  • Target

    rev.exe

  • Size

    7KB

  • Sample

    240529-kd5wgagf5t

  • MD5

    b3e1688a68a66cf3844242de091a1dde

  • SHA1

    4c062dd8b7fc98610b9d631d4bbb082f787abb3b

  • SHA256

    083a504054bf5034a40c863a4d1dd489a89fa50cc944f8c71994ec3292e95248

  • SHA512

    a0ba2400d61fbfddf5348f3d009d3f702816597710e847ec370193ec3d6de16e39fc3b90c4a884bddaa07bea1b28866c182cf01e6db80464ec9d6b1effa530ec

  • SSDEEP

    24:eFGStrJ9u0/6hQnZdkBQAVn1Y+BXKLqdeNDMSCvOXpmB:is0wEkBQAq+BX9SD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

94.139.242.7:5454

Targets

    • Target

      rev.exe

    • Size

      7KB

    • MD5

      b3e1688a68a66cf3844242de091a1dde

    • SHA1

      4c062dd8b7fc98610b9d631d4bbb082f787abb3b

    • SHA256

      083a504054bf5034a40c863a4d1dd489a89fa50cc944f8c71994ec3292e95248

    • SHA512

      a0ba2400d61fbfddf5348f3d009d3f702816597710e847ec370193ec3d6de16e39fc3b90c4a884bddaa07bea1b28866c182cf01e6db80464ec9d6b1effa530ec

    • SSDEEP

      24:eFGStrJ9u0/6hQnZdkBQAVn1Y+BXKLqdeNDMSCvOXpmB:is0wEkBQAq+BX9SD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks