General

  • Target

    b71444ccd315403626f914e9296f48b191ebcdf330d708b5639c014a3ecd59fdN.exe

  • Size

    97KB

  • Sample

    240926-ahdyfayelh

  • MD5

    39b83a66a1b19783aa874dfbc10ffaa0

  • SHA1

    29d4428104a09e1ec953f513b456a827d8d6a4dd

  • SHA256

    b71444ccd315403626f914e9296f48b191ebcdf330d708b5639c014a3ecd59fd

  • SHA512

    6cdc6703341ff5437138c32d24e7b5862c9cb4ab4b4057c86873e06e2dde407bd232c5d824ac06388d58326384398c4bbec863c53f9fdeb96bb4938ccb596442

  • SSDEEP

    1536:xhYegqtFyEQ4iszWISCGWG7BfcBPLsM6/hLGKUM:dXGWGuM

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.135:8888

Targets

    • Target

      b71444ccd315403626f914e9296f48b191ebcdf330d708b5639c014a3ecd59fdN.exe

    • Size

      97KB

    • MD5

      39b83a66a1b19783aa874dfbc10ffaa0

    • SHA1

      29d4428104a09e1ec953f513b456a827d8d6a4dd

    • SHA256

      b71444ccd315403626f914e9296f48b191ebcdf330d708b5639c014a3ecd59fd

    • SHA512

      6cdc6703341ff5437138c32d24e7b5862c9cb4ab4b4057c86873e06e2dde407bd232c5d824ac06388d58326384398c4bbec863c53f9fdeb96bb4938ccb596442

    • SSDEEP

      1536:xhYegqtFyEQ4iszWISCGWG7BfcBPLsM6/hLGKUM:dXGWGuM

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks