General

  • Target

    7d2a07b4119cb2e8f3c976d72049b6308d93a60d25deb04aee056af0816997b5

  • Size

    165KB

  • Sample

    241214-dreswatjhy

  • MD5

    d41b6c3d9474f8b2d102b3df6b505945

  • SHA1

    df547d4fcf70270033e1e1de4df3f37754c915f4

  • SHA256

    7d2a07b4119cb2e8f3c976d72049b6308d93a60d25deb04aee056af0816997b5

  • SHA512

    3251aa09842c9101c57962d5a67ada7e4880a3ce87892a4ec96c4948f4a115be5e6accb4eba2ef17c849e47956a024d3ee96172d8d01bb7fa0708036101fbe8d

  • SSDEEP

    3072:Yf+GYrgxI0c5XI/NklH0iNL2Sl8BJoNEWoY46UolIe5h:ndr0I0c5XICuiNLnluOdohPolj

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.10.166:4444

Targets

    • Target

      7d2a07b4119cb2e8f3c976d72049b6308d93a60d25deb04aee056af0816997b5

    • Size

      165KB

    • MD5

      d41b6c3d9474f8b2d102b3df6b505945

    • SHA1

      df547d4fcf70270033e1e1de4df3f37754c915f4

    • SHA256

      7d2a07b4119cb2e8f3c976d72049b6308d93a60d25deb04aee056af0816997b5

    • SHA512

      3251aa09842c9101c57962d5a67ada7e4880a3ce87892a4ec96c4948f4a115be5e6accb4eba2ef17c849e47956a024d3ee96172d8d01bb7fa0708036101fbe8d

    • SSDEEP

      3072:Yf+GYrgxI0c5XI/NklH0iNL2Sl8BJoNEWoY46UolIe5h:ndr0I0c5XICuiNLnluOdohPolj

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks