General

  • Target

    deb336e0992d49f57fcc9966485dee718b8da4e178ad3bb618984f59e343dd91

  • Size

    165KB

  • Sample

    240821-yc45fawhlg

  • MD5

    cd2cdb25acacebc2664ea201138cfefe

  • SHA1

    8c0109d840fbfde8ed7924f652b5d5b98aac9ebd

  • SHA256

    deb336e0992d49f57fcc9966485dee718b8da4e178ad3bb618984f59e343dd91

  • SHA512

    39183b8c166c9d755ba945b0a661e573d604e1e972483f5e5ceae065024d4451425a8a5de59ac1fb6fc9c9853ca4428cdd0e0ceabc3192715e65f93d0df3d220

  • SSDEEP

    3072:Yf+GYrgxI0c5XI/NklH0iNL2Sl8BJoNEWoY46UolkeERh:ndr0I0c5XICuiNLnluOdohPolWR

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.248.128:4444

Targets

    • Target

      deb336e0992d49f57fcc9966485dee718b8da4e178ad3bb618984f59e343dd91

    • Size

      165KB

    • MD5

      cd2cdb25acacebc2664ea201138cfefe

    • SHA1

      8c0109d840fbfde8ed7924f652b5d5b98aac9ebd

    • SHA256

      deb336e0992d49f57fcc9966485dee718b8da4e178ad3bb618984f59e343dd91

    • SHA512

      39183b8c166c9d755ba945b0a661e573d604e1e972483f5e5ceae065024d4451425a8a5de59ac1fb6fc9c9853ca4428cdd0e0ceabc3192715e65f93d0df3d220

    • SSDEEP

      3072:Yf+GYrgxI0c5XI/NklH0iNL2Sl8BJoNEWoY46UolkeERh:ndr0I0c5XICuiNLnluOdohPolWR

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks