General

  • Target

    NoThreatDetected-5e2abea822274f143ae7054b5f2fc8a7d98786e34e1eda53fcbf1715a9943aa4N

  • Size

    104KB

  • Sample

    240916-ahvk7azdqq

  • MD5

    2fa06de6f263e8df389a88e838933b40

  • SHA1

    038370d28f779436a3f5cdd35eb53a46ac537ebf

  • SHA256

    5e2abea822274f143ae7054b5f2fc8a7d98786e34e1eda53fcbf1715a9943aa4

  • SHA512

    a40e5fa7b657b265fe29f44786231be1605f8c6f9b66b2c5fa661b609b30bf0818bc891d4b1ab1c4d464347c1a492551a2ca1d07c26a3c4709dc393ee742164f

  • SSDEEP

    3072:9hPd/e0Jo5pXBSnV3XKJMblIczuSoxZW:z5etLRSntCS

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

18.119.108.159:80

Targets

    • Target

      NoThreatDetected-5e2abea822274f143ae7054b5f2fc8a7d98786e34e1eda53fcbf1715a9943aa4N

    • Size

      104KB

    • MD5

      2fa06de6f263e8df389a88e838933b40

    • SHA1

      038370d28f779436a3f5cdd35eb53a46ac537ebf

    • SHA256

      5e2abea822274f143ae7054b5f2fc8a7d98786e34e1eda53fcbf1715a9943aa4

    • SHA512

      a40e5fa7b657b265fe29f44786231be1605f8c6f9b66b2c5fa661b609b30bf0818bc891d4b1ab1c4d464347c1a492551a2ca1d07c26a3c4709dc393ee742164f

    • SSDEEP

      3072:9hPd/e0Jo5pXBSnV3XKJMblIczuSoxZW:z5etLRSntCS

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks