General

  • Target

    painfulwashere.exe

  • Size

    72KB

  • Sample

    241210-2vy8paykgp

  • MD5

    bd4da012e0bc04b46c47d7b096c3f985

  • SHA1

    147d29213f883b28ca7c78b5e73df3617d17d033

  • SHA256

    417c6d41306b4472410420a8bf19543fb5835e41e2b7940887e46ca9603d1a2c

  • SHA512

    f045dc7c7c5891361a004a03d758dbd1034fd27abc85ed699e4fac41567fa87f7eb89d203e90ccc7d25d860dcb860cfc1eb8e75b046e329b2f5ff9837b6ac307

  • SSDEEP

    1536:IrcqaeJ3xmdk/P5gfWkBYNKdXMEBMb+KR0Nc8QsJq39:7me2K9e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.19:1177

Targets

    • Target

      painfulwashere.exe

    • Size

      72KB

    • MD5

      bd4da012e0bc04b46c47d7b096c3f985

    • SHA1

      147d29213f883b28ca7c78b5e73df3617d17d033

    • SHA256

      417c6d41306b4472410420a8bf19543fb5835e41e2b7940887e46ca9603d1a2c

    • SHA512

      f045dc7c7c5891361a004a03d758dbd1034fd27abc85ed699e4fac41567fa87f7eb89d203e90ccc7d25d860dcb860cfc1eb8e75b046e329b2f5ff9837b6ac307

    • SSDEEP

      1536:IrcqaeJ3xmdk/P5gfWkBYNKdXMEBMb+KR0Nc8QsJq39:7me2K9e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks