General

  • Target

    8b5f536d893e669c3f3fc0ae40057d86640ed851366610682bd882de56bce121N.exe

  • Size

    7KB

  • Sample

    241129-1xre7aylaw

  • MD5

    c3ca14080019308fa6d1ecb63c8a2a40

  • SHA1

    9facf914ad3205032cca3a57f887861a2c580e68

  • SHA256

    8b5f536d893e669c3f3fc0ae40057d86640ed851366610682bd882de56bce121

  • SHA512

    aeba1bb2c958c663d88ab7b844883b2e13435ad0ebc6278a5b06965f43af6d636e80030329a760ddc0de88ecfa7705cf053577dce2e0a7d0fbe77946128ae3e2

  • SSDEEP

    24:eFGStrJ9u0/6LoEnZdkBQAVv1YjuKZqNeNDMSCvOXpmB:is0cookBQYqKrSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.137.36:9999

Targets

    • Target

      8b5f536d893e669c3f3fc0ae40057d86640ed851366610682bd882de56bce121N.exe

    • Size

      7KB

    • MD5

      c3ca14080019308fa6d1ecb63c8a2a40

    • SHA1

      9facf914ad3205032cca3a57f887861a2c580e68

    • SHA256

      8b5f536d893e669c3f3fc0ae40057d86640ed851366610682bd882de56bce121

    • SHA512

      aeba1bb2c958c663d88ab7b844883b2e13435ad0ebc6278a5b06965f43af6d636e80030329a760ddc0de88ecfa7705cf053577dce2e0a7d0fbe77946128ae3e2

    • SSDEEP

      24:eFGStrJ9u0/6LoEnZdkBQAVv1YjuKZqNeNDMSCvOXpmB:is0cookBQYqKrSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks