General

  • Target

    Windows11.exe

  • Size

    72KB

  • Sample

    240926-kmkxnaxell

  • MD5

    a0b235951575a7f8f9c0453da885156d

  • SHA1

    abc8cba106badb6401d669cc570b282dffda7de1

  • SHA256

    764b69b152c9b30772110a35a29c3e0d0be0ba3ab046c8879d6b8f59489c3763

  • SHA512

    85f88cc775b4761ab35548006452b9e89dd534c7762304d5f68f7444027fdeaf89bc2335a6ec804f4dca028ed7dcf425f4a316a4381417c06b03eeb8417fda0c

  • SSDEEP

    1536:IHyHlD5zffXKYp6oOKfrX1P/HsgESs63aZMb+KR0Nc8QsJq39:UyFD5zffaYMhKjX9/Hrr+e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

193.117.208.101:7777

Targets

    • Target

      Windows11.exe

    • Size

      72KB

    • MD5

      a0b235951575a7f8f9c0453da885156d

    • SHA1

      abc8cba106badb6401d669cc570b282dffda7de1

    • SHA256

      764b69b152c9b30772110a35a29c3e0d0be0ba3ab046c8879d6b8f59489c3763

    • SHA512

      85f88cc775b4761ab35548006452b9e89dd534c7762304d5f68f7444027fdeaf89bc2335a6ec804f4dca028ed7dcf425f4a316a4381417c06b03eeb8417fda0c

    • SSDEEP

      1536:IHyHlD5zffXKYp6oOKfrX1P/HsgESs63aZMb+KR0Nc8QsJq39:UyFD5zffaYMhKjX9/Hrr+e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks