General

  • Target

    de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15N.exe

  • Size

    72KB

  • Sample

    241208-dq2w1svlcm

  • MD5

    cb5b4590ea1cf8e042d3163b85a3fad0

  • SHA1

    209f66e9094013e734f8489426af98cd743a938d

  • SHA256

    de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15

  • SHA512

    a589a26ecb323e3bf4fcccc7f427fcb45aaaf97db4c6c02ee6dd213373daa164a46bfe35547224ebc65bc3394420ecb728e98eaca134fca40e921461c54873e3

  • SSDEEP

    1536:IVUEfezfq8nYHFSSwPLIanG2jAUUPnbETz9Mb+KR0Nc8QsJq39:KUfHnEdA3ArnwFe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.2.66.206:4444

Targets

    • Target

      de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15N.exe

    • Size

      72KB

    • MD5

      cb5b4590ea1cf8e042d3163b85a3fad0

    • SHA1

      209f66e9094013e734f8489426af98cd743a938d

    • SHA256

      de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15

    • SHA512

      a589a26ecb323e3bf4fcccc7f427fcb45aaaf97db4c6c02ee6dd213373daa164a46bfe35547224ebc65bc3394420ecb728e98eaca134fca40e921461c54873e3

    • SSDEEP

      1536:IVUEfezfq8nYHFSSwPLIanG2jAUUPnbETz9Mb+KR0Nc8QsJq39:KUfHnEdA3ArnwFe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks