General

  • Target

    740cdd7a4679b0a49b66ee37999dae25d8793f2e8f155d20164748951ad724d5

  • Size

    616KB

  • Sample

    241125-kxh6tavmdr

  • MD5

    8a5e9a49cb3ff1acf73bcf1bc50b7743

  • SHA1

    12b3ff9962e4849f436d087fe0e173ac3e17a9b7

  • SHA256

    740cdd7a4679b0a49b66ee37999dae25d8793f2e8f155d20164748951ad724d5

  • SHA512

    513dec55fc41972ffdb0acbe1fac082f05454573f787ca9a3e0aaf6c70a625ca0f36718f35535f3d0710c67beb07ca3875beafbb1146236cd77bae2201caa9e2

  • SSDEEP

    3072:pwYshsrdQMvt1j4TspdlJOl5lsJ9//S418PWZ8m1Xy7Q+smujtE8IhRs0ABR:JsmxH4Adil5lscGBR

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.16.20.81:8885

Targets

    • Target

      740cdd7a4679b0a49b66ee37999dae25d8793f2e8f155d20164748951ad724d5

    • Size

      616KB

    • MD5

      8a5e9a49cb3ff1acf73bcf1bc50b7743

    • SHA1

      12b3ff9962e4849f436d087fe0e173ac3e17a9b7

    • SHA256

      740cdd7a4679b0a49b66ee37999dae25d8793f2e8f155d20164748951ad724d5

    • SHA512

      513dec55fc41972ffdb0acbe1fac082f05454573f787ca9a3e0aaf6c70a625ca0f36718f35535f3d0710c67beb07ca3875beafbb1146236cd77bae2201caa9e2

    • SSDEEP

      3072:pwYshsrdQMvt1j4TspdlJOl5lsJ9//S418PWZ8m1Xy7Q+smujtE8IhRs0ABR:JsmxH4Adil5lscGBR

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks