General

  • Target

    ss.exe

  • Size

    72KB

  • Sample

    241106-m72r1szbmj

  • MD5

    61584ce40b3b4c6f5b9ac4fb4f8f0ec9

  • SHA1

    e1ae0b513f73c77309a8b29d91c5a3b6f9d5173c

  • SHA256

    ea0a6a37969c93adf76a55f9833d9d1ab2a0017705cc22fd66bd6c6277c84070

  • SHA512

    2c203be3ace0acdccf5c203bb79050388f991b60f6ec4df96fedd3a603eac6ffec26f237c47655a4c90e4b3efa2c4092a747e3890e2ea0df3c28a6e59b779b86

  • SSDEEP

    1536:IaSDzXDThy63ci87wFKOe6xbmq8iegq1Mb+KR0Nc8QsJq39:PSDHThyQc7QKoblggQe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.124.148.215:4444

Targets

    • Target

      ss.exe

    • Size

      72KB

    • MD5

      61584ce40b3b4c6f5b9ac4fb4f8f0ec9

    • SHA1

      e1ae0b513f73c77309a8b29d91c5a3b6f9d5173c

    • SHA256

      ea0a6a37969c93adf76a55f9833d9d1ab2a0017705cc22fd66bd6c6277c84070

    • SHA512

      2c203be3ace0acdccf5c203bb79050388f991b60f6ec4df96fedd3a603eac6ffec26f237c47655a4c90e4b3efa2c4092a747e3890e2ea0df3c28a6e59b779b86

    • SSDEEP

      1536:IaSDzXDThy63ci87wFKOe6xbmq8iegq1Mb+KR0Nc8QsJq39:PSDHThyQc7QKoblggQe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks