General

  • Target

    c083a1dcd33a4da78ac96201c12f825d68661b16909c684d0990c5eb04496857.exe

  • Size

    72KB

  • Sample

    241125-sa83qaylen

  • MD5

    aca629a343138574ecd02a7fce2ba780

  • SHA1

    9a4188d7c9737e93f4ef59cdb2c9e4ceddd6ae02

  • SHA256

    c083a1dcd33a4da78ac96201c12f825d68661b16909c684d0990c5eb04496857

  • SHA512

    c6f0680bb0ca1ee1027f8dbcd4a677c8f0f9b2ed4cfab058cfff364cf63c57204f29c9a59af5daf82ce85db100af3025bb6bbb5dc2e439c2d2d5f17f6c60d980

  • SSDEEP

    1536:ISwGL2a/+jRIm79P7ZXdNePcijOhMb+KR0Nc8QsJq3t:Vwra/KT7ZXL7e0Nc8QsCt

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.242.1:4444

Targets

    • Target

      c083a1dcd33a4da78ac96201c12f825d68661b16909c684d0990c5eb04496857.exe

    • Size

      72KB

    • MD5

      aca629a343138574ecd02a7fce2ba780

    • SHA1

      9a4188d7c9737e93f4ef59cdb2c9e4ceddd6ae02

    • SHA256

      c083a1dcd33a4da78ac96201c12f825d68661b16909c684d0990c5eb04496857

    • SHA512

      c6f0680bb0ca1ee1027f8dbcd4a677c8f0f9b2ed4cfab058cfff364cf63c57204f29c9a59af5daf82ce85db100af3025bb6bbb5dc2e439c2d2d5f17f6c60d980

    • SSDEEP

      1536:ISwGL2a/+jRIm79P7ZXdNePcijOhMb+KR0Nc8QsJq3t:Vwra/KT7ZXL7e0Nc8QsCt

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks