General

  • Target

    433118df41a9d107fe7e07128186fcfb7b934ffcb7a1aadb3cc02fb6900cb4d1N.exe

  • Size

    723KB

  • Sample

    241220-b5tg3swphq

  • MD5

    bae1382ebc9b5bfa167c1f27a2de9a50

  • SHA1

    fffba10e15287bab45038f2698c260bef7574674

  • SHA256

    433118df41a9d107fe7e07128186fcfb7b934ffcb7a1aadb3cc02fb6900cb4d1

  • SHA512

    61eeb9459add2df90bb50ba91497bdf750abcab569b8502852d4b3211d187f15b9fc8aa18b1f40e44ec5bc62ab2ebb2ffd46febe8642a7e7ad7dbcbb20ac6cba

  • SSDEEP

    12288:9Vt+vOLEZ1kxCNYyJElzxRs0uZz5LVI7Tua9dVo4t4qM20Gq7ADHfaZZkz:9+v7kKqXTua9dVjt0CHeQ

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.17.65.78:1024

Targets

    • Target

      433118df41a9d107fe7e07128186fcfb7b934ffcb7a1aadb3cc02fb6900cb4d1N.exe

    • Size

      723KB

    • MD5

      bae1382ebc9b5bfa167c1f27a2de9a50

    • SHA1

      fffba10e15287bab45038f2698c260bef7574674

    • SHA256

      433118df41a9d107fe7e07128186fcfb7b934ffcb7a1aadb3cc02fb6900cb4d1

    • SHA512

      61eeb9459add2df90bb50ba91497bdf750abcab569b8502852d4b3211d187f15b9fc8aa18b1f40e44ec5bc62ab2ebb2ffd46febe8642a7e7ad7dbcbb20ac6cba

    • SSDEEP

      12288:9Vt+vOLEZ1kxCNYyJElzxRs0uZz5LVI7Tua9dVo4t4qM20Gq7ADHfaZZkz:9+v7kKqXTua9dVjt0CHeQ

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks