General

  • Target

    02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea.exe

  • Size

    72KB

  • Sample

    241206-se7qfsypam

  • MD5

    45a79ff8cc4c4fc40a59f6378f526c37

  • SHA1

    3e4aa9d89d28620605162bf8bcbcb56fef2b8634

  • SHA256

    02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea

  • SHA512

    ab22bc973ce4fbf5da87274222e69c739ac8c7a33c7d28ac50f8df79920b44675163c88a35aec23f92996c83dd7884431a4ecd57189f8be47fd4a17ad0051d0a

  • SSDEEP

    1536:IhrgrKYxbz2nqDENhL/skQDD+Mb+KR0Nc8QsJq33:cgr3UqOhk+e0Nc8QsC3

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.21.134:5000

Targets

    • Target

      02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea.exe

    • Size

      72KB

    • MD5

      45a79ff8cc4c4fc40a59f6378f526c37

    • SHA1

      3e4aa9d89d28620605162bf8bcbcb56fef2b8634

    • SHA256

      02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea

    • SHA512

      ab22bc973ce4fbf5da87274222e69c739ac8c7a33c7d28ac50f8df79920b44675163c88a35aec23f92996c83dd7884431a4ecd57189f8be47fd4a17ad0051d0a

    • SSDEEP

      1536:IhrgrKYxbz2nqDENhL/skQDD+Mb+KR0Nc8QsJq33:cgr3UqOhk+e0Nc8QsC3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks