General

  • Target

    965b4a21ff439f369658e8e1be32d7f2c5bba5aeed9e4280aa229171ab1cd684N.exe

  • Size

    72KB

  • Sample

    241129-s2zy5axngr

  • MD5

    a4ac79e8b38eff240258fd52c1ce1030

  • SHA1

    8c39bddc8e0747c36554d44fe526ff66c27f66f3

  • SHA256

    965b4a21ff439f369658e8e1be32d7f2c5bba5aeed9e4280aa229171ab1cd684

  • SHA512

    0f249b7feed32c1194e1b31bf5b73b2bf86c32f4fb785e5e74d91bacf2d11258e3b53e0bc3ac7e9f7d491b738df20420eb74122bef192562011097074b93dc3b

  • SSDEEP

    1536:IHPVigSAUzRPXOpIhKfG/Wwc1ENMb+KR0Nc8QsJq39:6PVaAk+pTfG/Wx0e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.115.130:4444

Targets

    • Target

      965b4a21ff439f369658e8e1be32d7f2c5bba5aeed9e4280aa229171ab1cd684N.exe

    • Size

      72KB

    • MD5

      a4ac79e8b38eff240258fd52c1ce1030

    • SHA1

      8c39bddc8e0747c36554d44fe526ff66c27f66f3

    • SHA256

      965b4a21ff439f369658e8e1be32d7f2c5bba5aeed9e4280aa229171ab1cd684

    • SHA512

      0f249b7feed32c1194e1b31bf5b73b2bf86c32f4fb785e5e74d91bacf2d11258e3b53e0bc3ac7e9f7d491b738df20420eb74122bef192562011097074b93dc3b

    • SSDEEP

      1536:IHPVigSAUzRPXOpIhKfG/Wwc1ENMb+KR0Nc8QsJq39:6PVaAk+pTfG/Wx0e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks