General

  • Target

    edf6f65339a2403705ad2cce80be47e43d1b2cc154dfba16a82338170723b89d.exe

  • Size

    72KB

  • Sample

    241125-fydkhawpbp

  • MD5

    1546d408c45228e299b11bb25ab96dec

  • SHA1

    60bb080051ad03e224964c4de5713dce63c2611e

  • SHA256

    edf6f65339a2403705ad2cce80be47e43d1b2cc154dfba16a82338170723b89d

  • SHA512

    2bbfcb4058e6a08ff427154c9438c546ca503dd9af0fce69137ffb92781bba6c89d88ae78cbf6904998971cb84ec940d4aa01ac0c25126dbf47671ea5e6d1e5f

  • SSDEEP

    1536:Ia9rCwLVqZ2TW4bn/bq8Uzi+wMb+KR0Nc8QsJq3l:j9r3pcxmDrUWfe0Nc8QsCl

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.5.1:4444

Targets

    • Target

      edf6f65339a2403705ad2cce80be47e43d1b2cc154dfba16a82338170723b89d.exe

    • Size

      72KB

    • MD5

      1546d408c45228e299b11bb25ab96dec

    • SHA1

      60bb080051ad03e224964c4de5713dce63c2611e

    • SHA256

      edf6f65339a2403705ad2cce80be47e43d1b2cc154dfba16a82338170723b89d

    • SHA512

      2bbfcb4058e6a08ff427154c9438c546ca503dd9af0fce69137ffb92781bba6c89d88ae78cbf6904998971cb84ec940d4aa01ac0c25126dbf47671ea5e6d1e5f

    • SSDEEP

      1536:Ia9rCwLVqZ2TW4bn/bq8Uzi+wMb+KR0Nc8QsJq3l:j9r3pcxmDrUWfe0Nc8QsCl

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks