General

  • Target

    c3bbcc0d99a39a680bcaff9be85ded7a5dc72d2c94fb03a250b6e58b68277c1bN.exe

  • Size

    72KB

  • Sample

    240925-v9xj3syarj

  • MD5

    184c484aeeb639331c9715afb2fd8ef0

  • SHA1

    8c805170767763ffc605407bf2ea6ba93e66b949

  • SHA256

    c3bbcc0d99a39a680bcaff9be85ded7a5dc72d2c94fb03a250b6e58b68277c1b

  • SHA512

    d86d651791c4bf29171e9f62e43ba41272b70a0e36b9f1440489fcddaa1e893ef90e64ca1cfb456576a9c07ad67e552961730f86276a069b592812faaa56d2c6

  • SSDEEP

    1536:IhEwA5WpYOstEZHWUcnGVDMb+KR0Nc8QsJq39:H5iQtEZ2U0GBe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.34:4444

Targets

    • Target

      c3bbcc0d99a39a680bcaff9be85ded7a5dc72d2c94fb03a250b6e58b68277c1bN.exe

    • Size

      72KB

    • MD5

      184c484aeeb639331c9715afb2fd8ef0

    • SHA1

      8c805170767763ffc605407bf2ea6ba93e66b949

    • SHA256

      c3bbcc0d99a39a680bcaff9be85ded7a5dc72d2c94fb03a250b6e58b68277c1b

    • SHA512

      d86d651791c4bf29171e9f62e43ba41272b70a0e36b9f1440489fcddaa1e893ef90e64ca1cfb456576a9c07ad67e552961730f86276a069b592812faaa56d2c6

    • SSDEEP

      1536:IhEwA5WpYOstEZHWUcnGVDMb+KR0Nc8QsJq39:H5iQtEZ2U0GBe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks