General

  • Target

    331c99e542668e5f3f522515019683098970c2864c753172940f6a174fd2cb68.exe

  • Size

    72KB

  • Sample

    241201-yzyaeazrgw

  • MD5

    b21b58561228cbdfce8378522f1f6e04

  • SHA1

    a10e9fbd4dc64c91ac71b2676c0564c3ffb84832

  • SHA256

    331c99e542668e5f3f522515019683098970c2864c753172940f6a174fd2cb68

  • SHA512

    d9e8d9ed14ced16b4fb75174fb13eeedb11b99668e5b5f03b7e03dcb35ad315d2db7b594e59803baa07dd7e367014d3ca62c174f681add8000715635330d89cc

  • SSDEEP

    1536:It1iRI5pRWkFCImDsZKAnufu1u/+iMb+KR0Nc8QsJq3N:fwOkjNW/+ie0Nc8QsCN

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.55:4455

Targets

    • Target

      331c99e542668e5f3f522515019683098970c2864c753172940f6a174fd2cb68.exe

    • Size

      72KB

    • MD5

      b21b58561228cbdfce8378522f1f6e04

    • SHA1

      a10e9fbd4dc64c91ac71b2676c0564c3ffb84832

    • SHA256

      331c99e542668e5f3f522515019683098970c2864c753172940f6a174fd2cb68

    • SHA512

      d9e8d9ed14ced16b4fb75174fb13eeedb11b99668e5b5f03b7e03dcb35ad315d2db7b594e59803baa07dd7e367014d3ca62c174f681add8000715635330d89cc

    • SSDEEP

      1536:It1iRI5pRWkFCImDsZKAnufu1u/+iMb+KR0Nc8QsJq3N:fwOkjNW/+ie0Nc8QsCN

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks