General

  • Target

    16372712fd8136a84d1871353218691663bd045d2a21f5ec651ff4857f624bffN.exe

  • Size

    72KB

  • Sample

    241111-aadbyaxgnn

  • MD5

    7282999d0a64fdae272f7241677e83a7

  • SHA1

    a9769dc0d2b05142e36116eaa74ccd816cec0bc6

  • SHA256

    726fcb786e287a298ac288d6a77e9bd9c30d6213dd600b6202f78ebdd0b5a1b7

  • SHA512

    1740b89c451a38821d3bc12a09c79dd9261f2d21c4f376e5c6d149ca8c947f69ccfb57a7f5136809c18540f6dbf84bf802ae99eac57c8fe1121d61ac5090f0ff

  • SSDEEP

    1536:I4iphO9mjU0jt5ay/dFwA2tsMb+KR0Nc8QsJq3S:wY8H/ayd2qe0Nc8QsCS

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.203.255.255:4444

Targets

    • Target

      16372712fd8136a84d1871353218691663bd045d2a21f5ec651ff4857f624bffN.exe

    • Size

      72KB

    • MD5

      7282999d0a64fdae272f7241677e83a7

    • SHA1

      a9769dc0d2b05142e36116eaa74ccd816cec0bc6

    • SHA256

      726fcb786e287a298ac288d6a77e9bd9c30d6213dd600b6202f78ebdd0b5a1b7

    • SHA512

      1740b89c451a38821d3bc12a09c79dd9261f2d21c4f376e5c6d149ca8c947f69ccfb57a7f5136809c18540f6dbf84bf802ae99eac57c8fe1121d61ac5090f0ff

    • SSDEEP

      1536:I4iphO9mjU0jt5ay/dFwA2tsMb+KR0Nc8QsJq3S:wY8H/ayd2qe0Nc8QsCS

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks