General

  • Target

    d04e2ba054a8c8a01f608290a1c1fe0b78d063017d311c4c42eeb36afb0e37df.exe

  • Size

    7KB

  • Sample

    241230-q6c9tawpek

  • MD5

    4635b437bb25b9fce75c3e9be9b40c92

  • SHA1

    dec399b64c2ce6ec74894670f385fad2bd411de4

  • SHA256

    d04e2ba054a8c8a01f608290a1c1fe0b78d063017d311c4c42eeb36afb0e37df

  • SHA512

    9f5855a1dce991f986867aac368cd503f27635ce6a1d423f91d8882bd868acc2026ad2c824ca3f84998f91a94d79d81c0d856de59d000bf83e64f8417775388a

  • SSDEEP

    24:eFGStrJ9u0/6H2RnZdkBQAVKocfYKtRqZk2eNDMSCvOXpmBf:is0A2hkBQvzQK6k2SD9C2kBf

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.100.144:444

Targets

    • Target

      d04e2ba054a8c8a01f608290a1c1fe0b78d063017d311c4c42eeb36afb0e37df.exe

    • Size

      7KB

    • MD5

      4635b437bb25b9fce75c3e9be9b40c92

    • SHA1

      dec399b64c2ce6ec74894670f385fad2bd411de4

    • SHA256

      d04e2ba054a8c8a01f608290a1c1fe0b78d063017d311c4c42eeb36afb0e37df

    • SHA512

      9f5855a1dce991f986867aac368cd503f27635ce6a1d423f91d8882bd868acc2026ad2c824ca3f84998f91a94d79d81c0d856de59d000bf83e64f8417775388a

    • SSDEEP

      24:eFGStrJ9u0/6H2RnZdkBQAVKocfYKtRqZk2eNDMSCvOXpmBf:is0A2hkBQvzQK6k2SD9C2kBf

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks