General

  • Target

    tmp.exe

  • Size

    7KB

  • Sample

    241213-kb8jksvlgm

  • MD5

    459976dc3440b9fe9614d2e7c246af02

  • SHA1

    ea72df634719681351c66aea8b616349bf4b1cba

  • SHA256

    d459bd8e6ababe027af56fc683181351be1d4ad230da087e742aaef5c0979811

  • SHA512

    368d943206bb8475b218aefd9483c6bedeef53742366a7f87fe638f848c118097b99122bc6245538b92255d586c45d0de54dbd399a4c401d19fb87d5f8ecc400

  • SSDEEP

    24:eFGStrJ9u0/6+enZdkBQAVK86WOx+WYKZq452eNDMSCvOXpmB:is0z2kBQv8Ix+WYa52SD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

176.122.27.90:8888

Targets

    • Target

      tmp.exe

    • Size

      7KB

    • MD5

      459976dc3440b9fe9614d2e7c246af02

    • SHA1

      ea72df634719681351c66aea8b616349bf4b1cba

    • SHA256

      d459bd8e6ababe027af56fc683181351be1d4ad230da087e742aaef5c0979811

    • SHA512

      368d943206bb8475b218aefd9483c6bedeef53742366a7f87fe638f848c118097b99122bc6245538b92255d586c45d0de54dbd399a4c401d19fb87d5f8ecc400

    • SSDEEP

      24:eFGStrJ9u0/6+enZdkBQAVK86WOx+WYKZq452eNDMSCvOXpmB:is0z2kBQv8Ix+WYa52SD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks