General

  • Target

    a9522b4028d83700f45a5e8e16a60e69039b6031d2fb4aa31a312e7b0a4bf367.exe

  • Size

    114KB

  • Sample

    241120-1sf4natqfx

  • MD5

    c35409ef21a9b6bc8991dbebaa42faa2

  • SHA1

    dce7842fc0bc4a8360f7f3a0dae1667a603af028

  • SHA256

    a9522b4028d83700f45a5e8e16a60e69039b6031d2fb4aa31a312e7b0a4bf367

  • SHA512

    3bc524c219a6c7b0c051ec0fde9294391e174c9fca96e17ff971e9ae55d17254e0b1c65ad0cf3ff58e07313c5bea527e899a85825ff1738640dbc90f91e221bd

  • SSDEEP

    3072:FUiK/x7yj/8zSyLSQd4gSwOBpSLSweGG1qwhHOpIXl:Qx7yj/8zSASQegSwapSLSweGG1nXl

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.62.151:4444

Targets

    • Target

      a9522b4028d83700f45a5e8e16a60e69039b6031d2fb4aa31a312e7b0a4bf367.exe

    • Size

      114KB

    • MD5

      c35409ef21a9b6bc8991dbebaa42faa2

    • SHA1

      dce7842fc0bc4a8360f7f3a0dae1667a603af028

    • SHA256

      a9522b4028d83700f45a5e8e16a60e69039b6031d2fb4aa31a312e7b0a4bf367

    • SHA512

      3bc524c219a6c7b0c051ec0fde9294391e174c9fca96e17ff971e9ae55d17254e0b1c65ad0cf3ff58e07313c5bea527e899a85825ff1738640dbc90f91e221bd

    • SSDEEP

      3072:FUiK/x7yj/8zSyLSQd4gSwOBpSLSweGG1qwhHOpIXl:Qx7yj/8zSASQegSwapSLSweGG1nXl

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks