General

  • Target

    5d5a43f560381b7ab14f01cef9f2e6d391f6946879e8e9a4ca0376996c55c636N.exe

  • Size

    7KB

  • Sample

    241230-xcyf8awlct

  • MD5

    83e8847c559126b8a2b910c100f26e00

  • SHA1

    853979ed0831406929f5c7c7d63db4a85df59f37

  • SHA256

    5d5a43f560381b7ab14f01cef9f2e6d391f6946879e8e9a4ca0376996c55c636

  • SHA512

    653f2e83304b728eb19b24020e993808b3f68eff0ed93c5179caab8ac6fa8857cd1f931d7c51de55f1fb5d49b50231bba7eeb6509e3349c5fde05d82e5529843

  • SSDEEP

    24:eFGStrJ9u0/6H2RnZdkBQAVKocfYKtRqZk2eNDMSCvOXpmB:is0A2hkBQvzQK6k2SD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.100.144:444

Targets

    • Target

      5d5a43f560381b7ab14f01cef9f2e6d391f6946879e8e9a4ca0376996c55c636N.exe

    • Size

      7KB

    • MD5

      83e8847c559126b8a2b910c100f26e00

    • SHA1

      853979ed0831406929f5c7c7d63db4a85df59f37

    • SHA256

      5d5a43f560381b7ab14f01cef9f2e6d391f6946879e8e9a4ca0376996c55c636

    • SHA512

      653f2e83304b728eb19b24020e993808b3f68eff0ed93c5179caab8ac6fa8857cd1f931d7c51de55f1fb5d49b50231bba7eeb6509e3349c5fde05d82e5529843

    • SSDEEP

      24:eFGStrJ9u0/6H2RnZdkBQAVKocfYKtRqZk2eNDMSCvOXpmB:is0A2hkBQvzQK6k2SD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks