General

  • Target

    0233fdb00236ac7629c8dd317ef59e0fc5131196731ef51cab5e2252f0a0982b

  • Size

    30KB

  • Sample

    241217-x3lv4swpcn

  • MD5

    e662d796271b9e498d0b4bccb70d3edd

  • SHA1

    d39a3498cb5fb45a99f4cc969e2353679430ed8a

  • SHA256

    0233fdb00236ac7629c8dd317ef59e0fc5131196731ef51cab5e2252f0a0982b

  • SHA512

    12e2390538e5f316e14c499c9386971e18c42de08c0ea8dc656f05732b85fe6c7548a34f359dabd55015f165e28da1dd1d4a24c2942f8011d7afa077be4d4c3b

  • SSDEEP

    384:ZFXXmCSIIV7J7oC8UUTMyZkSEyga0YsorLujTYon7bkV+2EjsCpol+/oddpmWFif:PnRIFR1CBVsoHuvlnvp2isC2p90X+2p

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.191.103:4444

Targets

    • Target

      0233fdb00236ac7629c8dd317ef59e0fc5131196731ef51cab5e2252f0a0982b

    • Size

      30KB

    • MD5

      e662d796271b9e498d0b4bccb70d3edd

    • SHA1

      d39a3498cb5fb45a99f4cc969e2353679430ed8a

    • SHA256

      0233fdb00236ac7629c8dd317ef59e0fc5131196731ef51cab5e2252f0a0982b

    • SHA512

      12e2390538e5f316e14c499c9386971e18c42de08c0ea8dc656f05732b85fe6c7548a34f359dabd55015f165e28da1dd1d4a24c2942f8011d7afa077be4d4c3b

    • SSDEEP

      384:ZFXXmCSIIV7J7oC8UUTMyZkSEyga0YsorLujTYon7bkV+2EjsCpol+/oddpmWFif:PnRIFR1CBVsoHuvlnvp2isC2p90X+2p

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks