General

  • Target

    41a60a2247466ed5159ab6e4922075d9c5d36195fc63a8a685be99452943b1d3N.exe

  • Size

    139KB

  • Sample

    250101-3xsdlatmgk

  • MD5

    958715a3c62ee9ba7f7956d013c03eb0

  • SHA1

    d5a08230e125f299df6e6a308b91f9a115f4093f

  • SHA256

    41a60a2247466ed5159ab6e4922075d9c5d36195fc63a8a685be99452943b1d3

  • SHA512

    c4a598fdfb7af87784314a935aefcf6d73b28ef3e53db1ea4e508aafa40f3f41a6dbcb958759067810cdbe420108c4f87c4946078b3f1b76a6e95224563d0d27

  • SSDEEP

    3072:yXEqQVkIyXgFSynAFw8JFBVKOMwwJ8zEOnG/P:yXRQGIJ+Fw8JFzcLOnG/

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.1.20:123

Targets

    • Target

      41a60a2247466ed5159ab6e4922075d9c5d36195fc63a8a685be99452943b1d3N.exe

    • Size

      139KB

    • MD5

      958715a3c62ee9ba7f7956d013c03eb0

    • SHA1

      d5a08230e125f299df6e6a308b91f9a115f4093f

    • SHA256

      41a60a2247466ed5159ab6e4922075d9c5d36195fc63a8a685be99452943b1d3

    • SHA512

      c4a598fdfb7af87784314a935aefcf6d73b28ef3e53db1ea4e508aafa40f3f41a6dbcb958759067810cdbe420108c4f87c4946078b3f1b76a6e95224563d0d27

    • SSDEEP

      3072:yXEqQVkIyXgFSynAFw8JFBVKOMwwJ8zEOnG/P:yXRQGIJ+Fw8JFzcLOnG/

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks