General

  • Target

    59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3.exe

  • Size

    72KB

  • Sample

    241211-hgnegs1pay

  • MD5

    20ac59dd9267e87ef028da0fdd13bb46

  • SHA1

    446647060d646733698300d6d5ef927091eebec5

  • SHA256

    59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3

  • SHA512

    e96f587301905f91863515586baf8f7a199da2d5b1cfeaa73a7406e95d4964e495790a4d5966f3151ab038071e658aae00a46c97bff0a2d6f024a3408c7e3936

  • SSDEEP

    1536:IP4grj0d8/ZmzNT+x7aPGXLRN4OD2l9AXNMb+KR0Nc8QsJq3t:24gVQzNT+xmPGbRNizAde0Nc8QsCt

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.115:9090

Targets

    • Target

      59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3.exe

    • Size

      72KB

    • MD5

      20ac59dd9267e87ef028da0fdd13bb46

    • SHA1

      446647060d646733698300d6d5ef927091eebec5

    • SHA256

      59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3

    • SHA512

      e96f587301905f91863515586baf8f7a199da2d5b1cfeaa73a7406e95d4964e495790a4d5966f3151ab038071e658aae00a46c97bff0a2d6f024a3408c7e3936

    • SSDEEP

      1536:IP4grj0d8/ZmzNT+x7aPGXLRN4OD2l9AXNMb+KR0Nc8QsJq3t:24gVQzNT+xmPGbRNizAde0Nc8QsCt

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks