General

  • Target

    executable.2012.exe

  • Size

    72KB

  • Sample

    241209-lzjqsstpcy

  • MD5

    32de42a20c013aa80dc138b9bbc430ef

  • SHA1

    45ef2de4b50c15aa1c02894ffe2f0ec7b964344b

  • SHA256

    60d645236bcabd0f9754ae49ee8b73fd7349af9a960439981fd69124532e560a

  • SHA512

    98f1f440afeb838b94252a267a60b7042e5f6a4dc4f8b3bff7e7e0623b93df3a04fdcb24c5fb31d617931774f44c2b43f326bae25d1e13ab1122894c23fd0f67

  • SSDEEP

    384:IiElQUjoa9PaTmvXAVDXaUHH06zfAdYRcWmU5q3:IiE9oAwBXpCQq3

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.101:443

Targets

    • Target

      executable.2012.exe

    • Size

      72KB

    • MD5

      32de42a20c013aa80dc138b9bbc430ef

    • SHA1

      45ef2de4b50c15aa1c02894ffe2f0ec7b964344b

    • SHA256

      60d645236bcabd0f9754ae49ee8b73fd7349af9a960439981fd69124532e560a

    • SHA512

      98f1f440afeb838b94252a267a60b7042e5f6a4dc4f8b3bff7e7e0623b93df3a04fdcb24c5fb31d617931774f44c2b43f326bae25d1e13ab1122894c23fd0f67

    • SSDEEP

      384:IiElQUjoa9PaTmvXAVDXaUHH06zfAdYRcWmU5q3:IiE9oAwBXpCQq3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks