General

  • Target

    3eae98fd141194751527b59a2cfa1da4daa2af357b99f45c929ffcdc7d7d7997N.exe

  • Size

    72KB

  • Sample

    241220-ebmn8azjfp

  • MD5

    3ed78958f08eba91aac02f42bbc44830

  • SHA1

    24c3b002a0c326d3e3f5b299b51a0f18f9a241d6

  • SHA256

    3eae98fd141194751527b59a2cfa1da4daa2af357b99f45c929ffcdc7d7d7997

  • SHA512

    71b875cb767df683c1ad56863b600077a71e66bbc50fd84ae8c738dc51096382e27dff5228f85758d73cd07eeee98e7ed89dae63240ec015808f7d33cff3530b

  • SSDEEP

    1536:IJ4KZBiEywcl9h1AOLyMBMzRIveMb+KR0Nc8QsJq39:S4KZvHczh1AkBuRiee0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Targets

    • Target

      3eae98fd141194751527b59a2cfa1da4daa2af357b99f45c929ffcdc7d7d7997N.exe

    • Size

      72KB

    • MD5

      3ed78958f08eba91aac02f42bbc44830

    • SHA1

      24c3b002a0c326d3e3f5b299b51a0f18f9a241d6

    • SHA256

      3eae98fd141194751527b59a2cfa1da4daa2af357b99f45c929ffcdc7d7d7997

    • SHA512

      71b875cb767df683c1ad56863b600077a71e66bbc50fd84ae8c738dc51096382e27dff5228f85758d73cd07eeee98e7ed89dae63240ec015808f7d33cff3530b

    • SSDEEP

      1536:IJ4KZBiEywcl9h1AOLyMBMzRIveMb+KR0Nc8QsJq39:S4KZvHczh1AkBuRiee0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks