General

  • Target

    2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e

  • Size

    9KB

  • Sample

    240918-eyyp1ashnl

  • MD5

    42c9fdab8f39bb15f27e1c6b56c313ea

  • SHA1

    6b9890d457f70fc1dd75997b34156a5fd3a42996

  • SHA256

    2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e

  • SHA512

    0bf0cecd5d370c4f82f4374a1bfe68f0be75fa04da5a819bb6700f09da93aa4ed2952acbf0a18712e870024f481cae61409d673189d9eb59673544ac75e42a47

  • SSDEEP

    48:q0r+l6O5aXyn/hNhx4/jC/VGt+LrSD9C210Ehb0E:dX0kt+Lm5R

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

43.136.244.24:9987

Targets

    • Target

      2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e

    • Size

      9KB

    • MD5

      42c9fdab8f39bb15f27e1c6b56c313ea

    • SHA1

      6b9890d457f70fc1dd75997b34156a5fd3a42996

    • SHA256

      2646e519ee58312ca55f02f6cbfa1088591477427b02aad97edc35211906354e

    • SHA512

      0bf0cecd5d370c4f82f4374a1bfe68f0be75fa04da5a819bb6700f09da93aa4ed2952acbf0a18712e870024f481cae61409d673189d9eb59673544ac75e42a47

    • SSDEEP

      48:q0r+l6O5aXyn/hNhx4/jC/VGt+LrSD9C210Ehb0E:dX0kt+Lm5R

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks