General

  • Target

    1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599.exe

  • Size

    72KB

  • Sample

    241221-3c6eqatpbn

  • MD5

    242442292bc3363e911158a3bbdc1ca5

  • SHA1

    cdbbac8d78de04a0cad3ef2715547e1a97106ecf

  • SHA256

    1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599

  • SHA512

    06ffe7b12633b506b2b8333f7a5a2b6642572df12ee60dfe0bbddc47f67cbd0d60dc5f14a8bcdcc69472a3c12f810c4f5f388a694a04769470a4960b471f63da

  • SSDEEP

    1536:ICwWNOD5GssAzoGAhaf0wk0UMb+KR0Nc8QsJq31:twWU/swXiaK0Ue0Nc8QsC1

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.26:4444

Targets

    • Target

      1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599.exe

    • Size

      72KB

    • MD5

      242442292bc3363e911158a3bbdc1ca5

    • SHA1

      cdbbac8d78de04a0cad3ef2715547e1a97106ecf

    • SHA256

      1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599

    • SHA512

      06ffe7b12633b506b2b8333f7a5a2b6642572df12ee60dfe0bbddc47f67cbd0d60dc5f14a8bcdcc69472a3c12f810c4f5f388a694a04769470a4960b471f63da

    • SSDEEP

      1536:ICwWNOD5GssAzoGAhaf0wk0UMb+KR0Nc8QsJq31:twWU/swXiaK0Ue0Nc8QsC1

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks