General

  • Target

    a908193949c9b3f45f3b409d4b28949014ae27e9bb1e962fd5e65ebbc97fb89e.exe

  • Size

    149KB

  • Sample

    241217-esmqjs1mhm

  • MD5

    c2fd049f5e4af19811db14b28e1d9bdc

  • SHA1

    4ff988b0876061921d162e2077221f6a4923c976

  • SHA256

    a908193949c9b3f45f3b409d4b28949014ae27e9bb1e962fd5e65ebbc97fb89e

  • SHA512

    0c3c5727dc92dc43c835d2130c660f727faa87a23f2e21a00a6df69a1399c66d5c327309560adadadf6e18f6b6bceb725ddbfb6c9637ad73f5ae14a75bc9665c

  • SSDEEP

    3072:6Pm7brhtbDKROb953j/wmIIrXt8i8NI/FDjV/+1EdB/:6Pm7brhVWa953j/bIwXt8xEjV/+1EdB/

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

45.43.36.223:3344

Targets

    • Target

      a908193949c9b3f45f3b409d4b28949014ae27e9bb1e962fd5e65ebbc97fb89e.exe

    • Size

      149KB

    • MD5

      c2fd049f5e4af19811db14b28e1d9bdc

    • SHA1

      4ff988b0876061921d162e2077221f6a4923c976

    • SHA256

      a908193949c9b3f45f3b409d4b28949014ae27e9bb1e962fd5e65ebbc97fb89e

    • SHA512

      0c3c5727dc92dc43c835d2130c660f727faa87a23f2e21a00a6df69a1399c66d5c327309560adadadf6e18f6b6bceb725ddbfb6c9637ad73f5ae14a75bc9665c

    • SSDEEP

      3072:6Pm7brhtbDKROb953j/wmIIrXt8i8NI/FDjV/+1EdB/:6Pm7brhVWa953j/bIwXt8xEjV/+1EdB/

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks