General

  • Target

    97d40f59eb8b3892dc070da3e8d227b3e447668ea572d02c0d5463f0f130560a.exe

  • Size

    1.2MB

  • Sample

    241217-exdcns1nhq

  • MD5

    a5a743c5a0a74a435046a53e0296739c

  • SHA1

    acda32f6e76be0c51fec25d9f43aaed98f1fcc49

  • SHA256

    97d40f59eb8b3892dc070da3e8d227b3e447668ea572d02c0d5463f0f130560a

  • SHA512

    21c263b855d7a9dcdb51664a475610ad85fd15a1a99736ee97378393a6ab8918688c47c21a6725d54a59b3a4a43df87a4943d41d2aa9cbdd09b62d01ee662dde

  • SSDEEP

    12288:5n4UWGTlkfVdnWaUY4X50FJ7YuCygzcT0Xchv4nxmhkCt7V9n2VktM9NZ+OK:5n1WGTSPWhY4UJ5C7Rxakqn2Vv9b6

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.1.10:8888

Targets

    • Target

      97d40f59eb8b3892dc070da3e8d227b3e447668ea572d02c0d5463f0f130560a.exe

    • Size

      1.2MB

    • MD5

      a5a743c5a0a74a435046a53e0296739c

    • SHA1

      acda32f6e76be0c51fec25d9f43aaed98f1fcc49

    • SHA256

      97d40f59eb8b3892dc070da3e8d227b3e447668ea572d02c0d5463f0f130560a

    • SHA512

      21c263b855d7a9dcdb51664a475610ad85fd15a1a99736ee97378393a6ab8918688c47c21a6725d54a59b3a4a43df87a4943d41d2aa9cbdd09b62d01ee662dde

    • SSDEEP

      12288:5n4UWGTlkfVdnWaUY4X50FJ7YuCygzcT0Xchv4nxmhkCt7V9n2VktM9NZ+OK:5n1WGTSPWhY4UJ5C7Rxakqn2Vv9b6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks