General

  • Target

    7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2.exe

  • Size

    168KB

  • Sample

    241220-e29lnszrbq

  • MD5

    cd4d0398199d42561ceb70c9e1ce76d7

  • SHA1

    d87aa727958d5f94df0b31e88f131e359c2d9084

  • SHA256

    7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2

  • SHA512

    f79d4d93a984e7794ff7d95ecd6383cc4b3033fd6104fda54187b0d059ba2ffd75b26bfa7eb8fb25e1093060ecf495d96f76353e24ef5955f93d7781d7471cc4

  • SSDEEP

    3072:1Z8wQQ1w7+NmlcEm0SK4gRFVNrtu/T64fL6WT9t:UwA+NTD0SK4gRFVBtu/GTkt

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

157.230.10.115:443

Targets

    • Target

      7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2.exe

    • Size

      168KB

    • MD5

      cd4d0398199d42561ceb70c9e1ce76d7

    • SHA1

      d87aa727958d5f94df0b31e88f131e359c2d9084

    • SHA256

      7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2

    • SHA512

      f79d4d93a984e7794ff7d95ecd6383cc4b3033fd6104fda54187b0d059ba2ffd75b26bfa7eb8fb25e1093060ecf495d96f76353e24ef5955f93d7781d7471cc4

    • SSDEEP

      3072:1Z8wQQ1w7+NmlcEm0SK4gRFVNrtu/T64fL6WT9t:UwA+NTD0SK4gRFVBtu/GTkt

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks