General

  • Target

    39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe

  • Size

    3KB

  • Sample

    241207-dq5mxaypfk

  • MD5

    68852f4183e4b04ba78ed1f2c2124b7a

  • SHA1

    5aa806c168daaee3333f0a4090c4f2f3199cae21

  • SHA256

    39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a

  • SHA512

    2ed2220bde3f7bbd35582d865a43dcb580a1fc29741e8f2b302faed4615296acb8301f2cc8c664b2d336794ee411bc9c1e7473f863994f51967a6a488798f8b2

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.9:4444

Targets

    • Target

      39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe

    • Size

      3KB

    • MD5

      68852f4183e4b04ba78ed1f2c2124b7a

    • SHA1

      5aa806c168daaee3333f0a4090c4f2f3199cae21

    • SHA256

      39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a

    • SHA512

      2ed2220bde3f7bbd35582d865a43dcb580a1fc29741e8f2b302faed4615296acb8301f2cc8c664b2d336794ee411bc9c1e7473f863994f51967a6a488798f8b2

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks