General

  • Target

    agent.exe

  • Size

    72KB

  • Sample

    241224-ga87yasjbx

  • MD5

    aff07019035bbfe5bac96d943fadb530

  • SHA1

    8a9b99cbd0d9ab725c5cace0ef9a73658a1c96bc

  • SHA256

    c2e367c6f38b6276680526550403573a74e4db2f2469c7936afc2b935781feb6

  • SHA512

    99832091629c45f785f842ad69f46054c6cda5ed957fbc26a6b4b7d2ae73f62871a51270c8f5d2749ee7803944d0f282cfcfb9b2168476a8814b063fc0d292df

  • SSDEEP

    1536:Iih37HVVqRC/HV+Xdun/5iDiMlrMb+KR0Nc8QsJq39:TZVwRC/Acnhi7e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.104:44444

Targets

    • Target

      agent.exe

    • Size

      72KB

    • MD5

      aff07019035bbfe5bac96d943fadb530

    • SHA1

      8a9b99cbd0d9ab725c5cace0ef9a73658a1c96bc

    • SHA256

      c2e367c6f38b6276680526550403573a74e4db2f2469c7936afc2b935781feb6

    • SHA512

      99832091629c45f785f842ad69f46054c6cda5ed957fbc26a6b4b7d2ae73f62871a51270c8f5d2749ee7803944d0f282cfcfb9b2168476a8814b063fc0d292df

    • SSDEEP

      1536:Iih37HVVqRC/HV+Xdun/5iDiMlrMb+KR0Nc8QsJq39:TZVwRC/Acnhi7e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks