General

  • Target

    54b9c674ee177e41eea04ab8600207293d437a1345e955489e5042bf016a651d

  • Size

    6.4MB

  • Sample

    241226-lnyetasngk

  • MD5

    e6fa1f76bd201537b8998e74f48491ac

  • SHA1

    a06dde6df2faf3e1b3891a45c0947f278ea1aaea

  • SHA256

    54b9c674ee177e41eea04ab8600207293d437a1345e955489e5042bf016a651d

  • SHA512

    9d86ce6ec60469f42954ed272887a13c96c50947d15e8932478483a65db7edba87a2fdf3c1714bb2948bdfb19ab380e1075ad0d9e1719c9d329cdd1acd0c8ef4

  • SSDEEP

    98304:KbWFrzY+MCZrNvRok2Uy9XrLqX58QvZwQwey:9YGrRTkYChey

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.159.129:3333

Targets

    • Target

      54b9c674ee177e41eea04ab8600207293d437a1345e955489e5042bf016a651d

    • Size

      6.4MB

    • MD5

      e6fa1f76bd201537b8998e74f48491ac

    • SHA1

      a06dde6df2faf3e1b3891a45c0947f278ea1aaea

    • SHA256

      54b9c674ee177e41eea04ab8600207293d437a1345e955489e5042bf016a651d

    • SHA512

      9d86ce6ec60469f42954ed272887a13c96c50947d15e8932478483a65db7edba87a2fdf3c1714bb2948bdfb19ab380e1075ad0d9e1719c9d329cdd1acd0c8ef4

    • SSDEEP

      98304:KbWFrzY+MCZrNvRok2Uy9XrLqX58QvZwQwey:9YGrRTkYChey

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks