General

  • Target

    e83bb7b39c6b5b772ce5345d026387521c38512fe7fc376524a364b2ed634e0fN.exe

  • Size

    72KB

  • Sample

    241126-rvk1ysvnby

  • MD5

    81e6668c0113418dea60d18ffb1b9d60

  • SHA1

    7f52dcc6da7c12fd3d29da915610ed6f8e9d59ee

  • SHA256

    e83bb7b39c6b5b772ce5345d026387521c38512fe7fc376524a364b2ed634e0f

  • SHA512

    c106c837d3885162cbad076d7a774de357f0642787d97521ed95c7bdace55c9aadcbd3d41e4cec32496d10ca1520d425ef4359e0aab6130ce9d9b883106450d5

  • SSDEEP

    1536:I2ScCzNLlhL2Vxr4DnsAbUR46SBZmfPR5Mb+KR0Nc8QsJq39:IFix4wAwR46e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.43.104:6666

Targets

    • Target

      e83bb7b39c6b5b772ce5345d026387521c38512fe7fc376524a364b2ed634e0fN.exe

    • Size

      72KB

    • MD5

      81e6668c0113418dea60d18ffb1b9d60

    • SHA1

      7f52dcc6da7c12fd3d29da915610ed6f8e9d59ee

    • SHA256

      e83bb7b39c6b5b772ce5345d026387521c38512fe7fc376524a364b2ed634e0f

    • SHA512

      c106c837d3885162cbad076d7a774de357f0642787d97521ed95c7bdace55c9aadcbd3d41e4cec32496d10ca1520d425ef4359e0aab6130ce9d9b883106450d5

    • SSDEEP

      1536:I2ScCzNLlhL2Vxr4DnsAbUR46SBZmfPR5Mb+KR0Nc8QsJq39:IFix4wAwR46e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks