General

  • Target

    70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7N.exe

  • Size

    72KB

  • Sample

    241221-2xzx1asph1

  • MD5

    d67cf1185c24a192f5cc4fae6e8e4a30

  • SHA1

    15899a1dd7c1a1354d4936a848737a966a89559a

  • SHA256

    70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7

  • SHA512

    ef4e7dd31d2d5046e381c8b4f9c7099a749aed89f54d1f6c61496e65dab01ef5dffa0769ef407a0ea41c44aa1fe5b70082feb9ea000250d3105c7181704251c2

  • SSDEEP

    1536:IfizxyZmYxeuofx16zZOMb9fBKYs+OF4Mb+KR0Nc8QsJq39:bzsZmieuofX6zZ13s+64e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.106:5555

Targets

    • Target

      70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7N.exe

    • Size

      72KB

    • MD5

      d67cf1185c24a192f5cc4fae6e8e4a30

    • SHA1

      15899a1dd7c1a1354d4936a848737a966a89559a

    • SHA256

      70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7

    • SHA512

      ef4e7dd31d2d5046e381c8b4f9c7099a749aed89f54d1f6c61496e65dab01ef5dffa0769ef407a0ea41c44aa1fe5b70082feb9ea000250d3105c7181704251c2

    • SSDEEP

      1536:IfizxyZmYxeuofx16zZOMb9fBKYs+OF4Mb+KR0Nc8QsJq39:bzsZmieuofX6zZ13s+64e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks