General

  • Target

    93e86a342e12278fd46c659ea705ddf15ed75a6d500e7ff2d39692194decf150.exe

  • Size

    72KB

  • Sample

    241226-e7sv4swre1

  • MD5

    16d96997866903ba9b4ad3734c4bdec5

  • SHA1

    19b48062d2581ff5c6d2da9f9bf6d54aef81ad5b

  • SHA256

    93e86a342e12278fd46c659ea705ddf15ed75a6d500e7ff2d39692194decf150

  • SHA512

    0fd0454173c6cb4350c98cee69842befb0c64afaef6715997158cb5869bde5d75a885fcdaa2f1ffee4e047d640d7c6a9a1be634fb797eeed040d74d30f1669ec

  • SSDEEP

    1536:IQmKAjueqxnVbxW68kkfU6EvxMb+KR0Nc8QsJq3H:5RfxnLe/ce0Nc8QsCH

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.64.3:4444

Targets

    • Target

      93e86a342e12278fd46c659ea705ddf15ed75a6d500e7ff2d39692194decf150.exe

    • Size

      72KB

    • MD5

      16d96997866903ba9b4ad3734c4bdec5

    • SHA1

      19b48062d2581ff5c6d2da9f9bf6d54aef81ad5b

    • SHA256

      93e86a342e12278fd46c659ea705ddf15ed75a6d500e7ff2d39692194decf150

    • SHA512

      0fd0454173c6cb4350c98cee69842befb0c64afaef6715997158cb5869bde5d75a885fcdaa2f1ffee4e047d640d7c6a9a1be634fb797eeed040d74d30f1669ec

    • SSDEEP

      1536:IQmKAjueqxnVbxW68kkfU6EvxMb+KR0Nc8QsJq3H:5RfxnLe/ce0Nc8QsCH

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks