General

  • Target

    46eb0edbec71f3754800448272e4eb49.bin

  • Size

    2.2MB

  • Sample

    240625-cb23ssxgmq

  • MD5

    4d30a825dcd124ece202caa61119fd99

  • SHA1

    8eb9350f85668dfdd99d53789103257c27680080

  • SHA256

    012822502029b564d0f350e5d1391049cd9b916505b27b73d112c0f9f54fb956

  • SHA512

    1b8ea30e62c39d1f9fdec9cee9959acc975d39eb786a775e0d264586f88e9847994fb51a3ce81f7d2ac0ebd7471907c11bf6e20f083bcc847a032a1089af3ede

  • SSDEEP

    49152:PNVMiw1Jqvt42ULMfPe8/3aZnGz1+SMPlLf9k+OPf8l:PNVMn1Jq+5LiPei36vzSnPU

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.31.194:5000

Targets

    • Target

      67c94bbda3d8ff61d59eb18f751080e72b7261ed4ffca29f7d9679ef717757f1.exe

    • Size

      4.6MB

    • MD5

      46eb0edbec71f3754800448272e4eb49

    • SHA1

      ea524298bd2a1a91d02839d12b69afed12821743

    • SHA256

      67c94bbda3d8ff61d59eb18f751080e72b7261ed4ffca29f7d9679ef717757f1

    • SHA512

      63629a779d075bddee668630734a9cd376a263e5d430bdd77ddf3aaebd9c7fa988177b72678ef953d37e0d4feaf22c55b12111328878fa36deb5a13030514235

    • SSDEEP

      49152:98XT4f5tWd2UVMSXQbgEpeUH6yn+Cy+E+T9/4VO7DurDr/gpaV:98XXEpeUH6yn+Cy+nmpkC

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks