General

  • Target

    2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96N.exe

  • Size

    72KB

  • Sample

    241222-jhd3wazjfy

  • MD5

    c514ef1dfea7168c8fcbcd3c069bd2e0

  • SHA1

    03c7ddc1c0a3f14336e7d898bf7a02dd8559bbb8

  • SHA256

    2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96

  • SHA512

    3e4c81ffb2b55cd8ad1e475f705c66f029a92de629b469ffeba6e8f3dcd942aea0222d6045f55b4e875cbb6c9bda3f96363222300eac94cd08516a1eaccfb932

  • SSDEEP

    1536:ICwWNOD5GssAzoGAhaf0wk0UMb+KR0Nc8QsJq39:twWU/swXiaK0Ue0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.26:4444

Targets

    • Target

      2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96N.exe

    • Size

      72KB

    • MD5

      c514ef1dfea7168c8fcbcd3c069bd2e0

    • SHA1

      03c7ddc1c0a3f14336e7d898bf7a02dd8559bbb8

    • SHA256

      2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96

    • SHA512

      3e4c81ffb2b55cd8ad1e475f705c66f029a92de629b469ffeba6e8f3dcd942aea0222d6045f55b4e875cbb6c9bda3f96363222300eac94cd08516a1eaccfb932

    • SSDEEP

      1536:ICwWNOD5GssAzoGAhaf0wk0UMb+KR0Nc8QsJq39:twWU/swXiaK0Ue0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks