General

  • Target

    cdebb3ed6c9be0fad01a8f764f502c1794c06ca9f43c3e03a35731290e318446.exe

  • Size

    41KB

  • Sample

    241116-nah43svjg1

  • MD5

    c0a7e30ec5b0bf8b75e47ef874787b81

  • SHA1

    9a9ac5b127b4df2dda9215abadb759fbcddf819c

  • SHA256

    cdebb3ed6c9be0fad01a8f764f502c1794c06ca9f43c3e03a35731290e318446

  • SHA512

    0504c5eeceff9d00d527a117b0052478f26824ebec2870bc2a84f96d36af4cef45c422117ab146ee8af51c882f8de61dfa5fa36007ec9020e46fafdfd6bbecaa

  • SSDEEP

    768:6loK+uJzmK9+jvRpBq1RnvCKlldnvCKhb:6eKrdmc+HB1KlOKhb

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.111.128:4444

Targets

    • Target

      cdebb3ed6c9be0fad01a8f764f502c1794c06ca9f43c3e03a35731290e318446.exe

    • Size

      41KB

    • MD5

      c0a7e30ec5b0bf8b75e47ef874787b81

    • SHA1

      9a9ac5b127b4df2dda9215abadb759fbcddf819c

    • SHA256

      cdebb3ed6c9be0fad01a8f764f502c1794c06ca9f43c3e03a35731290e318446

    • SHA512

      0504c5eeceff9d00d527a117b0052478f26824ebec2870bc2a84f96d36af4cef45c422117ab146ee8af51c882f8de61dfa5fa36007ec9020e46fafdfd6bbecaa

    • SSDEEP

      768:6loK+uJzmK9+jvRpBq1RnvCKlldnvCKhb:6eKrdmc+HB1KlOKhb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks