General

  • Target

    de50d82ac6c9a826e0d0b42ca358f58bdb2e4239ba582ffa695209421628d82eN.exe

  • Size

    72KB

  • Sample

    241208-epmldasjax

  • MD5

    1b9e289f83dc8fd19bb14e3202784b60

  • SHA1

    414b03ce391cc67a8de1cae4331c9bc11820207a

  • SHA256

    de50d82ac6c9a826e0d0b42ca358f58bdb2e4239ba582ffa695209421628d82e

  • SHA512

    c025c190d7b1adc9ea6a1bb3fd4a869f8649c7a77bfa5457f0bc7a07345b29ce8791553e505848b6cf00d29e29e543d482a3d058d61472dee7545d650b986202

  • SSDEEP

    1536:ITA0qI/U9kgl6mbbNiTRq0tMb+KR0Nc8QsJq39:q/Uigl6mbbOqse0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

115.159.72.226:3344

Targets

    • Target

      de50d82ac6c9a826e0d0b42ca358f58bdb2e4239ba582ffa695209421628d82eN.exe

    • Size

      72KB

    • MD5

      1b9e289f83dc8fd19bb14e3202784b60

    • SHA1

      414b03ce391cc67a8de1cae4331c9bc11820207a

    • SHA256

      de50d82ac6c9a826e0d0b42ca358f58bdb2e4239ba582ffa695209421628d82e

    • SHA512

      c025c190d7b1adc9ea6a1bb3fd4a869f8649c7a77bfa5457f0bc7a07345b29ce8791553e505848b6cf00d29e29e543d482a3d058d61472dee7545d650b986202

    • SSDEEP

      1536:ITA0qI/U9kgl6mbbNiTRq0tMb+KR0Nc8QsJq39:q/Uigl6mbbOqse0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks