General

  • Target

    something.exe

  • Size

    72KB

  • Sample

    241106-24magszhnm

  • MD5

    38b26f0b802d5e6001621122e0626419

  • SHA1

    d0d9894c2ebb6c4e58a3aa5e50625f08176d8d29

  • SHA256

    79411c0b2c877210039713a1d18947e81a5fae55ec290c3c0907410acc524365

  • SHA512

    23fc285574fc408567e1def1e727779fc8b84bc800a3b60be955b6003b1018c73c52da6843dac6b99445640966731174382f907cc11c07922cd3d79009a5f0df

  • SSDEEP

    1536:IEio0Gg3rrshkDAS4dKMCEM4LMX4HrZ2pwMK9D7Mb+KR0Nc8QsJq39:5Y93vyk0S4S744X4Awl7e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

193.161.193.99:27429

Targets

    • Target

      something.exe

    • Size

      72KB

    • MD5

      38b26f0b802d5e6001621122e0626419

    • SHA1

      d0d9894c2ebb6c4e58a3aa5e50625f08176d8d29

    • SHA256

      79411c0b2c877210039713a1d18947e81a5fae55ec290c3c0907410acc524365

    • SHA512

      23fc285574fc408567e1def1e727779fc8b84bc800a3b60be955b6003b1018c73c52da6843dac6b99445640966731174382f907cc11c07922cd3d79009a5f0df

    • SSDEEP

      1536:IEio0Gg3rrshkDAS4dKMCEM4LMX4HrZ2pwMK9D7Mb+KR0Nc8QsJq39:5Y93vyk0S4S744X4Awl7e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks