General

  • Target

    333bc94d7df2fca5ffe61e85c809e905c02b6f6e7709fb07fa7c3c7d55e673ee.exe

  • Size

    1.1MB

  • Sample

    241123-kqdyhssjey

  • MD5

    db50b2c47fac3dfcd53cb678e4279c63

  • SHA1

    66e5c36a5fd36eceb31dd98bd81e7f0c2ed6d9cd

  • SHA256

    333bc94d7df2fca5ffe61e85c809e905c02b6f6e7709fb07fa7c3c7d55e673ee

  • SHA512

    2767b40d59f3b0eb7cfc9cd9f8717aaa905081730a5d42d699b64fb9a5db7f374250f7faf1c15c0dfc3857e9c354ee8ae23f1033bd08a73c5bf386c99937d534

  • SSDEEP

    24576:213gJnNiQQSA7Ph8NKvBUWqPU5EDvLJPjraFLR5ROWV:2WjrHKvBUTPjrkp7V

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.2.21:4455

Targets

    • Target

      333bc94d7df2fca5ffe61e85c809e905c02b6f6e7709fb07fa7c3c7d55e673ee.exe

    • Size

      1.1MB

    • MD5

      db50b2c47fac3dfcd53cb678e4279c63

    • SHA1

      66e5c36a5fd36eceb31dd98bd81e7f0c2ed6d9cd

    • SHA256

      333bc94d7df2fca5ffe61e85c809e905c02b6f6e7709fb07fa7c3c7d55e673ee

    • SHA512

      2767b40d59f3b0eb7cfc9cd9f8717aaa905081730a5d42d699b64fb9a5db7f374250f7faf1c15c0dfc3857e9c354ee8ae23f1033bd08a73c5bf386c99937d534

    • SSDEEP

      24576:213gJnNiQQSA7Ph8NKvBUWqPU5EDvLJPjraFLR5ROWV:2WjrHKvBUTPjrkp7V

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks