General

  • Target

    ece3a4848490caeb2ab62773ee9d3d28bab72560a452f59de17dea3b369e9d09

  • Size

    9KB

  • Sample

    240911-enk16a1hjn

  • MD5

    f0676ddbfb7ead380a41dcd4ba11fcbd

  • SHA1

    a9aa8437cf5178a1b52e388065fa55fd9f6bf692

  • SHA256

    ece3a4848490caeb2ab62773ee9d3d28bab72560a452f59de17dea3b369e9d09

  • SHA512

    0249e4f19ca8b9be573e2bc38b359efb948488a8c472309765085ff2c06529f16bdd14a8c14926565f190d67ce05fa536216acb1194cc36ee73e0fff8ac81fc7

  • SSDEEP

    48:q0r+l6O5aXyn/hNhx4/jC/VZqIlK7SD9C2V+b0E:dX0Lq255x

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.184.151:4444

Targets

    • Target

      ece3a4848490caeb2ab62773ee9d3d28bab72560a452f59de17dea3b369e9d09

    • Size

      9KB

    • MD5

      f0676ddbfb7ead380a41dcd4ba11fcbd

    • SHA1

      a9aa8437cf5178a1b52e388065fa55fd9f6bf692

    • SHA256

      ece3a4848490caeb2ab62773ee9d3d28bab72560a452f59de17dea3b369e9d09

    • SHA512

      0249e4f19ca8b9be573e2bc38b359efb948488a8c472309765085ff2c06529f16bdd14a8c14926565f190d67ce05fa536216acb1194cc36ee73e0fff8ac81fc7

    • SSDEEP

      48:q0r+l6O5aXyn/hNhx4/jC/VZqIlK7SD9C2V+b0E:dX0Lq255x

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks