General

  • Target

    cbc012ed269e486f23a076bfc37399e60d8465a8fa26106e93a8c76887388668N.exe

  • Size

    7KB

  • Sample

    241211-h68fysspcv

  • MD5

    70a9669cb8d1bb5182a323b6d2a72880

  • SHA1

    9a4f669f7953a769b206a41e7fcebc05b19789fc

  • SHA256

    cbc012ed269e486f23a076bfc37399e60d8465a8fa26106e93a8c76887388668

  • SHA512

    37e58a3ab7463d51d51104e8a2f9407c9845f15a5134f55efe76d4dfd01125040ac2a91e11408cfd634b95e7cf0edcdb627541c95c926197068933b2a9849e7b

  • SSDEEP

    24:eFGStrJ9u0/6DmRnZd0BQAVS1RgV/Jn0HyMETpmB:is0nh0BQPo/JCsIB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.109.131:4444

Targets

    • Target

      cbc012ed269e486f23a076bfc37399e60d8465a8fa26106e93a8c76887388668N.exe

    • Size

      7KB

    • MD5

      70a9669cb8d1bb5182a323b6d2a72880

    • SHA1

      9a4f669f7953a769b206a41e7fcebc05b19789fc

    • SHA256

      cbc012ed269e486f23a076bfc37399e60d8465a8fa26106e93a8c76887388668

    • SHA512

      37e58a3ab7463d51d51104e8a2f9407c9845f15a5134f55efe76d4dfd01125040ac2a91e11408cfd634b95e7cf0edcdb627541c95c926197068933b2a9849e7b

    • SSDEEP

      24:eFGStrJ9u0/6DmRnZd0BQAVS1RgV/Jn0HyMETpmB:is0nh0BQPo/JCsIB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks