General

  • Target

    88fb936b95349c16d1c3541209c2c15db8a64986ca2b920b2728ed1e07c4f266

  • Size

    161KB

  • Sample

    241112-l875rayrgt

  • MD5

    f33e372193ace0867e5465ceba5d3f3e

  • SHA1

    34ad26cf8f8ce4d60c8dde288bbbc4989b4800be

  • SHA256

    88fb936b95349c16d1c3541209c2c15db8a64986ca2b920b2728ed1e07c4f266

  • SHA512

    c80f40388aeb07fa64189638e359f8256bc70c8b2687c1c3c313462d7c084e8944bc1e7b4d1302b0474632efc9b6f1c66eaa63380343e82539a3e403441a991f

  • SSDEEP

    3072:aUCaO22AciGn40+ez36VptMjBNR4QArQ5gTQ8O2sn:PCaO4cid5gitwNR4/rQ54QWs

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.227.151:4444

Targets

    • Target

      88fb936b95349c16d1c3541209c2c15db8a64986ca2b920b2728ed1e07c4f266

    • Size

      161KB

    • MD5

      f33e372193ace0867e5465ceba5d3f3e

    • SHA1

      34ad26cf8f8ce4d60c8dde288bbbc4989b4800be

    • SHA256

      88fb936b95349c16d1c3541209c2c15db8a64986ca2b920b2728ed1e07c4f266

    • SHA512

      c80f40388aeb07fa64189638e359f8256bc70c8b2687c1c3c313462d7c084e8944bc1e7b4d1302b0474632efc9b6f1c66eaa63380343e82539a3e403441a991f

    • SSDEEP

      3072:aUCaO22AciGn40+ez36VptMjBNR4QArQ5gTQ8O2sn:PCaO4cid5gitwNR4/rQ54QWs

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks