General

  • Target

    7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65N.exe

  • Size

    72KB

  • Sample

    241129-w69kxazrdy

  • MD5

    8d3f50a5f205d792ec4ee3561b8f0300

  • SHA1

    649f0a4648d0f8404b6194102f7e479fce6b1a50

  • SHA256

    7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65

  • SHA512

    173c9c915c498460c0c6f52a2bda4de31b30cd4fe7a1eb79c658dd66880b94d4f03023f038258d8a591f993c0f4b6f780de35014f9dc0a0c01570b92637f7617

  • SSDEEP

    1536:IiZjXfvK14CFpvv8ArboCL+zX5Mb+KR0Nc8QsJq39:1ZLfv58vpo75e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Targets

    • Target

      7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65N.exe

    • Size

      72KB

    • MD5

      8d3f50a5f205d792ec4ee3561b8f0300

    • SHA1

      649f0a4648d0f8404b6194102f7e479fce6b1a50

    • SHA256

      7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65

    • SHA512

      173c9c915c498460c0c6f52a2bda4de31b30cd4fe7a1eb79c658dd66880b94d4f03023f038258d8a591f993c0f4b6f780de35014f9dc0a0c01570b92637f7617

    • SSDEEP

      1536:IiZjXfvK14CFpvv8ArboCL+zX5Mb+KR0Nc8QsJq39:1ZLfv58vpo75e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks