General

  • Target

    25e0b0d9c870fa53d03850125916cbb62265fd5b83a05400cae3d95dea5b8bef

  • Size

    296KB

  • Sample

    241121-ld8g2avphr

  • MD5

    896e5594e75d4442dccb54164d6f5881

  • SHA1

    04c7cac4530cc3b3a66f2737fd2d2364af5c6249

  • SHA256

    25e0b0d9c870fa53d03850125916cbb62265fd5b83a05400cae3d95dea5b8bef

  • SHA512

    b43e46f1b8a90a755cb554799a13710cd061ea2004202ffa06442faddb8a258a0d74f2e1bf880bf1c14be04bb288df04a157717cae387594c56ae842beda7118

  • SSDEEP

    3072:cMZ2UBsr/eMamt1X4hf9GfvRbtiJeXX418PWZ8m1X94QQcBuVtEPIhRlmwBR:c1UGTB/4fsRbtigtBR

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.204.129:5555

Targets

    • Target

      25e0b0d9c870fa53d03850125916cbb62265fd5b83a05400cae3d95dea5b8bef

    • Size

      296KB

    • MD5

      896e5594e75d4442dccb54164d6f5881

    • SHA1

      04c7cac4530cc3b3a66f2737fd2d2364af5c6249

    • SHA256

      25e0b0d9c870fa53d03850125916cbb62265fd5b83a05400cae3d95dea5b8bef

    • SHA512

      b43e46f1b8a90a755cb554799a13710cd061ea2004202ffa06442faddb8a258a0d74f2e1bf880bf1c14be04bb288df04a157717cae387594c56ae842beda7118

    • SSDEEP

      3072:cMZ2UBsr/eMamt1X4hf9GfvRbtiJeXX418PWZ8m1X94QQcBuVtEPIhRlmwBR:c1UGTB/4fsRbtigtBR

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks