General

  • Target

    04f7368461477066880718cc07795e4edf7ac49895f0910125b5b51f9eb259c4N.exe

  • Size

    72KB

  • Sample

    241221-1rty5a1jbs

  • MD5

    6c2eafb11640bcfbca0a4fe645a86d20

  • SHA1

    bd842528dd7c0058cfd0c1f5558d83327f0abed0

  • SHA256

    04f7368461477066880718cc07795e4edf7ac49895f0910125b5b51f9eb259c4

  • SHA512

    bba002c749324c7f7a9a16bc0ed73676627b55daf926d72e5e06abfce6a1219a4ecc6bbbff4c1c8b5ee2d407f881c94de37c64f85668c9da7b4948c6cd5eb3ff

  • SSDEEP

    1536:IpcphT82hqH5JPKWnWfz+zg5XMb+KR0Nc8QsJq39:wKvhqH5Z1nWaWXe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.223.100:5551

Targets

    • Target

      04f7368461477066880718cc07795e4edf7ac49895f0910125b5b51f9eb259c4N.exe

    • Size

      72KB

    • MD5

      6c2eafb11640bcfbca0a4fe645a86d20

    • SHA1

      bd842528dd7c0058cfd0c1f5558d83327f0abed0

    • SHA256

      04f7368461477066880718cc07795e4edf7ac49895f0910125b5b51f9eb259c4

    • SHA512

      bba002c749324c7f7a9a16bc0ed73676627b55daf926d72e5e06abfce6a1219a4ecc6bbbff4c1c8b5ee2d407f881c94de37c64f85668c9da7b4948c6cd5eb3ff

    • SSDEEP

      1536:IpcphT82hqH5JPKWnWfz+zg5XMb+KR0Nc8QsJq39:wKvhqH5Z1nWaWXe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks