General

  • Target

    001cd014461d6151ffd27d7bfb7809c6be1d50ffec7450e25352ac208570d1b6.exe

  • Size

    72KB

  • Sample

    241228-ce9xtatqak

  • MD5

    483563460e53715c6c0a8aeadd85b885

  • SHA1

    f0ffdeae4b44048924c63a157dd619f5327253f3

  • SHA256

    001cd014461d6151ffd27d7bfb7809c6be1d50ffec7450e25352ac208570d1b6

  • SHA512

    9f530ee651cdd61f0f9b914f5d29ce937ec1fdf1aa417d6f16153f2d8eff8d0fd95807c77de2746308ffa3dc59a5c9a14ae59827848192a5716f2f913793fa41

  • SSDEEP

    1536:I72wXHc78gqXVnzeEBVAl8cT0TZMb+KR0Nc8QsJq39:M2wK8g+VaEoPYTZe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

18.209.65.151:4444

Targets

    • Target

      001cd014461d6151ffd27d7bfb7809c6be1d50ffec7450e25352ac208570d1b6.exe

    • Size

      72KB

    • MD5

      483563460e53715c6c0a8aeadd85b885

    • SHA1

      f0ffdeae4b44048924c63a157dd619f5327253f3

    • SHA256

      001cd014461d6151ffd27d7bfb7809c6be1d50ffec7450e25352ac208570d1b6

    • SHA512

      9f530ee651cdd61f0f9b914f5d29ce937ec1fdf1aa417d6f16153f2d8eff8d0fd95807c77de2746308ffa3dc59a5c9a14ae59827848192a5716f2f913793fa41

    • SSDEEP

      1536:I72wXHc78gqXVnzeEBVAl8cT0TZMb+KR0Nc8QsJq39:M2wK8g+VaEoPYTZe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks