General

  • Target

    rev5656.exe

  • Size

    7KB

  • Sample

    240529-kd5wgagf5v

  • MD5

    6a9cbc059911a2dc01fbdb901a0107e8

  • SHA1

    0ffaa617041e0e6e909c6193d7195974e5c95bca

  • SHA256

    0671478053332972b07e9896e459ecc4d4d8c6a32457f135dd7e843aae2abb73

  • SHA512

    d2cd9d90341f5f84c6e0a49ed3ebfc0e0ab4f631eb3d5f85cf7c21d6a4825a81afd435c7c7d84f732e9ea3afd8d48a86eed2d91f13a65fd0ceb41847d929f457

  • SSDEEP

    24:eFGStrJ9u0/6hnnZdkBQAV23WOx+JKZqoeNDMSCvOXpmB:is0wDkBQrx+JaSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

94.139.242.7:5656

Targets

    • Target

      rev5656.exe

    • Size

      7KB

    • MD5

      6a9cbc059911a2dc01fbdb901a0107e8

    • SHA1

      0ffaa617041e0e6e909c6193d7195974e5c95bca

    • SHA256

      0671478053332972b07e9896e459ecc4d4d8c6a32457f135dd7e843aae2abb73

    • SHA512

      d2cd9d90341f5f84c6e0a49ed3ebfc0e0ab4f631eb3d5f85cf7c21d6a4825a81afd435c7c7d84f732e9ea3afd8d48a86eed2d91f13a65fd0ceb41847d929f457

    • SSDEEP

      24:eFGStrJ9u0/6hnnZdkBQAV23WOx+JKZqoeNDMSCvOXpmB:is0wDkBQrx+JaSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks