General

  • Target

    eeceff38327fc236b4978ebaf96194b05ee1e77e423568872c9c5386070eda7e.exe

  • Size

    72KB

  • Sample

    241207-jncr1aymfp

  • MD5

    832defcf059c60a109cb738a18fb0224

  • SHA1

    5787d88d145bf6ee2e87b7e6f994c2db96160c7b

  • SHA256

    eeceff38327fc236b4978ebaf96194b05ee1e77e423568872c9c5386070eda7e

  • SHA512

    7fee1185e3fc7e3afbbbadfa69e168498d9a3028235f62c64a3a0428ef1d733b1a90518552add115f8294c7bef8b5f5de9d79995b699b0e9b899f4ae17fa8993

  • SSDEEP

    1536:IvqQnbdlwO5UTopN1htO9NwDRGMb+KR0Nc8QsJq3/:7QbIEhtjGe0Nc8QsC/

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.16:4444

Targets

    • Target

      eeceff38327fc236b4978ebaf96194b05ee1e77e423568872c9c5386070eda7e.exe

    • Size

      72KB

    • MD5

      832defcf059c60a109cb738a18fb0224

    • SHA1

      5787d88d145bf6ee2e87b7e6f994c2db96160c7b

    • SHA256

      eeceff38327fc236b4978ebaf96194b05ee1e77e423568872c9c5386070eda7e

    • SHA512

      7fee1185e3fc7e3afbbbadfa69e168498d9a3028235f62c64a3a0428ef1d733b1a90518552add115f8294c7bef8b5f5de9d79995b699b0e9b899f4ae17fa8993

    • SSDEEP

      1536:IvqQnbdlwO5UTopN1htO9NwDRGMb+KR0Nc8QsJq3/:7QbIEhtjGe0Nc8QsC/

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks