General

  • Target

    320c94d94b2898c19da3b7af66c63d156060ec20b50ed67f1672c4745d2cbdff

  • Size

    327KB

  • Sample

    241201-ycx15azlax

  • MD5

    911c7b6bbbb10ae7e5bf1f34a369bb7e

  • SHA1

    aecb639ae6f367d389af60f3919e06033af13ef9

  • SHA256

    320c94d94b2898c19da3b7af66c63d156060ec20b50ed67f1672c4745d2cbdff

  • SHA512

    130affbd99133be4256661ab280bea14277ffa04a7f6987bd512e532a78d8f684661ae2523730758f205a54a4fe1a0a94b99d25b2a8cbb47ad7a153369a692c6

  • SSDEEP

    6144:hKza7ALxvWwGliAPmS7Bh1C00vaYudwWiMmEia8FgQva8VTiYr2:hK+h906p7XM01bdcbZFfvXh2

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.59.129:6665

Targets

    • Target

      320c94d94b2898c19da3b7af66c63d156060ec20b50ed67f1672c4745d2cbdff

    • Size

      327KB

    • MD5

      911c7b6bbbb10ae7e5bf1f34a369bb7e

    • SHA1

      aecb639ae6f367d389af60f3919e06033af13ef9

    • SHA256

      320c94d94b2898c19da3b7af66c63d156060ec20b50ed67f1672c4745d2cbdff

    • SHA512

      130affbd99133be4256661ab280bea14277ffa04a7f6987bd512e532a78d8f684661ae2523730758f205a54a4fe1a0a94b99d25b2a8cbb47ad7a153369a692c6

    • SSDEEP

      6144:hKza7ALxvWwGliAPmS7Bh1C00vaYudwWiMmEia8FgQva8VTiYr2:hK+h906p7XM01bdcbZFfvXh2

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks