General

  • Target

    f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093.exe

  • Size

    72KB

  • Sample

    241118-qgb1fsxfnr

  • MD5

    dde420333180e6f1fb22ec0d7bb5ddba

  • SHA1

    5551b782b84abe2606fd2897cf6285bb3854844b

  • SHA256

    f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093

  • SHA512

    9e952f70ee58439cfdf93e00d3d81f3320bb602f8cd38643844c48568c3b2540dda807887967f0e074fb3310ff13ee74db979b9947b99e51a4263535d2373917

  • SSDEEP

    1536:IknH2GwF6HJpIg/OfCc7Thq4OLsZytZg6drl0rklTROMb+KR0Nc8QsJq3H:x2GwMpIg/O6c7Tc4OjJayke0Nc8QsCH

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.19:4444

Targets

    • Target

      f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093.exe

    • Size

      72KB

    • MD5

      dde420333180e6f1fb22ec0d7bb5ddba

    • SHA1

      5551b782b84abe2606fd2897cf6285bb3854844b

    • SHA256

      f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093

    • SHA512

      9e952f70ee58439cfdf93e00d3d81f3320bb602f8cd38643844c48568c3b2540dda807887967f0e074fb3310ff13ee74db979b9947b99e51a4263535d2373917

    • SSDEEP

      1536:IknH2GwF6HJpIg/OfCc7Thq4OLsZytZg6drl0rklTROMb+KR0Nc8QsJq3H:x2GwMpIg/O6c7Tc4OjJayke0Nc8QsCH

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks