General

  • Target

    reddit.exe

  • Size

    72KB

  • Sample

    241223-xevs4sxnev

  • MD5

    23544090c6d379e3eca7343c4f05d4d2

  • SHA1

    c9250e363790a573e9921a68b7abe64f27e63df1

  • SHA256

    b439d22ed2c1e1f83f3c52d1a7307d9aee8b516166ab221cb6d67b188cd80f56

  • SHA512

    6aca78b0653e87ac80d7f562e6ab6d650f4d53d375cad043eb9613c7bbd642f7f82564a872b1b05520a77acbeba9da0540c4cd5a855a28a8188ebe3a4b57775c

  • SSDEEP

    1536:I15v3HYXkOXlgX3p+f4RYuL47YzAnsVebkTsT5Wj6Mb+KR0Nc8QsJq39:Y5v3Y0O1u3pplqvnsG+8e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.185.221.23:1121

Targets

    • Target

      reddit.exe

    • Size

      72KB

    • MD5

      23544090c6d379e3eca7343c4f05d4d2

    • SHA1

      c9250e363790a573e9921a68b7abe64f27e63df1

    • SHA256

      b439d22ed2c1e1f83f3c52d1a7307d9aee8b516166ab221cb6d67b188cd80f56

    • SHA512

      6aca78b0653e87ac80d7f562e6ab6d650f4d53d375cad043eb9613c7bbd642f7f82564a872b1b05520a77acbeba9da0540c4cd5a855a28a8188ebe3a4b57775c

    • SSDEEP

      1536:I15v3HYXkOXlgX3p+f4RYuL47YzAnsVebkTsT5Wj6Mb+KR0Nc8QsJq39:Y5v3Y0O1u3pplqvnsG+8e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks