General

  • Target

    2b57b3719ef8b02db556a8b2b07b4efcab71cb072d443f3259174bc47abee5c3N.exe

  • Size

    41KB

  • Sample

    241115-x9y41stqar

  • MD5

    28847bdb55bc8576b083738f2f500110

  • SHA1

    8b63c6251a1daca05672974e422592af58e7b111

  • SHA256

    2b57b3719ef8b02db556a8b2b07b4efcab71cb072d443f3259174bc47abee5c3

  • SHA512

    38f943655d05c33d5fb0b5226ce00aafc59c5ba86e6814779b49e9875fdf987d5913869fa897db4fd5b3bdd89578c3612ff666d2144939f89ac746c9df834666

  • SSDEEP

    768:6loK+uJzmK9+jvRpBq1RnvCKlldnvCKh:6eKrdmc+HB1KlOKh

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.111.128:4444

Targets

    • Target

      2b57b3719ef8b02db556a8b2b07b4efcab71cb072d443f3259174bc47abee5c3N.exe

    • Size

      41KB

    • MD5

      28847bdb55bc8576b083738f2f500110

    • SHA1

      8b63c6251a1daca05672974e422592af58e7b111

    • SHA256

      2b57b3719ef8b02db556a8b2b07b4efcab71cb072d443f3259174bc47abee5c3

    • SHA512

      38f943655d05c33d5fb0b5226ce00aafc59c5ba86e6814779b49e9875fdf987d5913869fa897db4fd5b3bdd89578c3612ff666d2144939f89ac746c9df834666

    • SSDEEP

      768:6loK+uJzmK9+jvRpBq1RnvCKlldnvCKh:6eKrdmc+HB1KlOKh

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks