General

  • Target

    9782a279274007ae2a013b93297dc05709dd07724a5a5fcfe43f0e278235714d.exe

  • Size

    96KB

  • Sample

    241230-ts1dzasjhv

  • MD5

    f84eda795ca32150e80d1f5539a88c4d

  • SHA1

    c9c0dc0c25397ff7cb1a542112ae27389d351516

  • SHA256

    9782a279274007ae2a013b93297dc05709dd07724a5a5fcfe43f0e278235714d

  • SHA512

    160b1130a4ca4b161f295985e0abf37b530252db7387740a296804431d90bc6e272ebab074255361ebd73fae62850cbad1c536f47263862dd89a767c2ad9f377

  • SSDEEP

    1536:xSQ+iqE+l/+fVD2n5/AMvXP3Tg6aH+JP5L5da3DtowL:xSBOVD2n5/AajiH+JP5L5I6wL

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.129.128:8000

Targets

    • Target

      9782a279274007ae2a013b93297dc05709dd07724a5a5fcfe43f0e278235714d.exe

    • Size

      96KB

    • MD5

      f84eda795ca32150e80d1f5539a88c4d

    • SHA1

      c9c0dc0c25397ff7cb1a542112ae27389d351516

    • SHA256

      9782a279274007ae2a013b93297dc05709dd07724a5a5fcfe43f0e278235714d

    • SHA512

      160b1130a4ca4b161f295985e0abf37b530252db7387740a296804431d90bc6e272ebab074255361ebd73fae62850cbad1c536f47263862dd89a767c2ad9f377

    • SSDEEP

      1536:xSQ+iqE+l/+fVD2n5/AMvXP3Tg6aH+JP5L5da3DtowL:xSBOVD2n5/AajiH+JP5L5I6wL

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Matrix

Tasks