General

  • Target

    1a3eb3ef90a41f2956d2e6c0e4c8cd50N.exe

  • Size

    7KB

  • Sample

    240713-agtmhazarh

  • MD5

    1a3eb3ef90a41f2956d2e6c0e4c8cd50

  • SHA1

    f9658bab1e5f4b767a6303a375407a553e968fd7

  • SHA256

    e39a54b7f9be162656fb6ab2f8f9692d79e56a296521d9b05748fdbd384caf57

  • SHA512

    5a993c0c090aad98d39f199d723267957cb2f13d2bddf7bd67237a4dcec9685b3eb02b3cc07b1cda0f773107a56a57a219f1d20ebdbcf5aa0cf8cf060c53247a

  • SSDEEP

    24:eFGStrJ9u0/6cPnZd0BQAVv1Y+BXKZqAGeNDMSCvOXpmB:is05r0BQYq+BXhSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.202.159:12346

Targets

    • Target

      1a3eb3ef90a41f2956d2e6c0e4c8cd50N.exe

    • Size

      7KB

    • MD5

      1a3eb3ef90a41f2956d2e6c0e4c8cd50

    • SHA1

      f9658bab1e5f4b767a6303a375407a553e968fd7

    • SHA256

      e39a54b7f9be162656fb6ab2f8f9692d79e56a296521d9b05748fdbd384caf57

    • SHA512

      5a993c0c090aad98d39f199d723267957cb2f13d2bddf7bd67237a4dcec9685b3eb02b3cc07b1cda0f773107a56a57a219f1d20ebdbcf5aa0cf8cf060c53247a

    • SSDEEP

      24:eFGStrJ9u0/6cPnZd0BQAVv1Y+BXKZqAGeNDMSCvOXpmB:is05r0BQYq+BXhSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks