General

  • Target

    621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66dN.exe

  • Size

    72KB

  • Sample

    241204-edbpqswkgp

  • MD5

    88c1e686be387971eb1125143cde4550

  • SHA1

    3ba4efc89766f16fb5bc0fd8f81d518e94050d34

  • SHA256

    621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66d

  • SHA512

    9bb25c554155232bbe971a5e98a2836bd04822581ea2302a9f7afb9b6e603acbc23470fc140d85e47bfb45e45adb1343c6410143b17b0951111e291f9091f7e6

  • SSDEEP

    1536:Id/ZuXkKxTlwk6rwZsOpKDfMb+KR0Nc8QsJq39:G/0UKxTIUZBp2fe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Targets

    • Target

      621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66dN.exe

    • Size

      72KB

    • MD5

      88c1e686be387971eb1125143cde4550

    • SHA1

      3ba4efc89766f16fb5bc0fd8f81d518e94050d34

    • SHA256

      621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66d

    • SHA512

      9bb25c554155232bbe971a5e98a2836bd04822581ea2302a9f7afb9b6e603acbc23470fc140d85e47bfb45e45adb1343c6410143b17b0951111e291f9091f7e6

    • SSDEEP

      1536:Id/ZuXkKxTlwk6rwZsOpKDfMb+KR0Nc8QsJq39:G/0UKxTIUZBp2fe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks