General

  • Target

    7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe.exe

  • Size

    72KB

  • Sample

    241202-2djfxaskbk

  • MD5

    620c71b71ae98bb4d2658f6f63ce24f2

  • SHA1

    641917ac420019b5b5199d06da888aa035f06ec2

  • SHA256

    7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe

  • SHA512

    e41a1fa80a67a7ef2ae8310158d076439bfd36e8586d837b1297f41a3b8ed2732c4029dea5079a93db69fb49b2245c63116b6ab9e2591cc485a9117a4c885c62

  • SSDEEP

    1536:Ixutmeb/qZ9UTcSe723fo8b3Mb+KR0Nc8QsJq3H:IKTTDU2g8b3e0Nc8QsCH

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.10:4444

Targets

    • Target

      7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe.exe

    • Size

      72KB

    • MD5

      620c71b71ae98bb4d2658f6f63ce24f2

    • SHA1

      641917ac420019b5b5199d06da888aa035f06ec2

    • SHA256

      7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe

    • SHA512

      e41a1fa80a67a7ef2ae8310158d076439bfd36e8586d837b1297f41a3b8ed2732c4029dea5079a93db69fb49b2245c63116b6ab9e2591cc485a9117a4c885c62

    • SSDEEP

      1536:Ixutmeb/qZ9UTcSe723fo8b3Mb+KR0Nc8QsJq3H:IKTTDU2g8b3e0Nc8QsCH

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks