General

  • Target

    42491951a30d419eb9c77204c5ab7df8b406d2b97c7a6a9645e2f62aa6194c1a.exe

  • Size

    7KB

  • Sample

    241211-kswlcazneq

  • MD5

    ff5dbb65321f6babd69b10b011c304d7

  • SHA1

    640a03da8129e79088360366ca2af1fe3ad5ba11

  • SHA256

    42491951a30d419eb9c77204c5ab7df8b406d2b97c7a6a9645e2f62aa6194c1a

  • SHA512

    b8289f51a4e9e959cf902d67d4278b7d19a19453d40b64e4994e9f9e16fe688668749a65f1745621196da8f3621d9672cf2334657529325e08c2735c9f98cef2

  • SSDEEP

    24:eFGStrJ9u0/6DmRnZd0BQAVS1RgV/Jn0HyMETpmBP:is0nh0BQPo/JCsIBP

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.109.131:4444

Targets

    • Target

      42491951a30d419eb9c77204c5ab7df8b406d2b97c7a6a9645e2f62aa6194c1a.exe

    • Size

      7KB

    • MD5

      ff5dbb65321f6babd69b10b011c304d7

    • SHA1

      640a03da8129e79088360366ca2af1fe3ad5ba11

    • SHA256

      42491951a30d419eb9c77204c5ab7df8b406d2b97c7a6a9645e2f62aa6194c1a

    • SHA512

      b8289f51a4e9e959cf902d67d4278b7d19a19453d40b64e4994e9f9e16fe688668749a65f1745621196da8f3621d9672cf2334657529325e08c2735c9f98cef2

    • SSDEEP

      24:eFGStrJ9u0/6DmRnZd0BQAVS1RgV/Jn0HyMETpmBP:is0nh0BQPo/JCsIBP

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks