General

  • Target

    4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7

  • Size

    79KB

  • Sample

    241116-f6dv8szlgt

  • MD5

    dfbafdb89f97fb33bfff7c7275ed23d2

  • SHA1

    237e915f08526de9daf35873defe572d539ec14d

  • SHA256

    4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7

  • SHA512

    d93b0826f999a6896c21b6f0c6313082a86cd4d0494ac9c9dba1b63e6dcf148c02ac9f57241b5848b97ebcf02c0a8a1a3359beb9f433c862149b8446ec818634

  • SSDEEP

    1536:5bqmt7l50EldQu6/zohGFGLUcBT86W+yxSPyYR0iXQBYSOXClT:5bqE7vfm/oBTrW+EzYR0CUbOCB

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.77.130:4444

Targets

    • Target

      4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7

    • Size

      79KB

    • MD5

      dfbafdb89f97fb33bfff7c7275ed23d2

    • SHA1

      237e915f08526de9daf35873defe572d539ec14d

    • SHA256

      4e52b55a84fd16c5ad7b37ed8ae1211f213390810efb8297b553827124b6bec7

    • SHA512

      d93b0826f999a6896c21b6f0c6313082a86cd4d0494ac9c9dba1b63e6dcf148c02ac9f57241b5848b97ebcf02c0a8a1a3359beb9f433c862149b8446ec818634

    • SSDEEP

      1536:5bqmt7l50EldQu6/zohGFGLUcBT86W+yxSPyYR0iXQBYSOXClT:5bqE7vfm/oBTrW+EzYR0CUbOCB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks