General

  • Target

    e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701N.exe

  • Size

    72KB

  • Sample

    241126-qhmtcaypen

  • MD5

    c54397cbb4a643e6255233207a5be720

  • SHA1

    acc6f19a9188308d6300e24475f0e8569fb0440d

  • SHA256

    e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701

  • SHA512

    e29df3179b8bc75d3e285f26ef01ed2e48ac45ff2f8b5e5a2f1d05229d198dcd0b324181b97c3085b6c205acbfff54f3252150acef216c371a2fccf654f3b485

  • SSDEEP

    1536:IxyNgZkepa8PXu+4pllMEgwms/nzxgjMb+KR0Nc8QsJq39:cyKZkep/54p3QjonOje0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Targets

    • Target

      e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701N.exe

    • Size

      72KB

    • MD5

      c54397cbb4a643e6255233207a5be720

    • SHA1

      acc6f19a9188308d6300e24475f0e8569fb0440d

    • SHA256

      e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701

    • SHA512

      e29df3179b8bc75d3e285f26ef01ed2e48ac45ff2f8b5e5a2f1d05229d198dcd0b324181b97c3085b6c205acbfff54f3252150acef216c371a2fccf654f3b485

    • SSDEEP

      1536:IxyNgZkepa8PXu+4pllMEgwms/nzxgjMb+KR0Nc8QsJq39:cyKZkep/54p3QjonOje0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks