General

  • Target

    e5b1baa61a6dc6630be9e87cb31564caa7336a674f70bf0bf82ab23cb8e82e6d.exe

  • Size

    232KB

  • Sample

    250102-b3bt9aylaq

  • MD5

    e56804263e4ec01bdf6d427fe201698e

  • SHA1

    eace0564e694b1a76e0a044b872a31bc0b6dab69

  • SHA256

    e5b1baa61a6dc6630be9e87cb31564caa7336a674f70bf0bf82ab23cb8e82e6d

  • SHA512

    792c756a75a44846473d71ac7c8c8f64d274cbb6db78fbb3ae258e5a89fe9f613308f0728049dc4d3f58d36a7bb067da1a48e89b9b8e86139e168707ae5f7fe9

  • SSDEEP

    3072:UT/rQV26xsrUXM2vxxxgsdHk3BdauodKgkp4W/F418PWZ8m1XFzQc5uZtEfgnDNf:ULrV62wZyrauoUu7YDNyBReR

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.0.10.43:4434

Targets

    • Target

      e5b1baa61a6dc6630be9e87cb31564caa7336a674f70bf0bf82ab23cb8e82e6d.exe

    • Size

      232KB

    • MD5

      e56804263e4ec01bdf6d427fe201698e

    • SHA1

      eace0564e694b1a76e0a044b872a31bc0b6dab69

    • SHA256

      e5b1baa61a6dc6630be9e87cb31564caa7336a674f70bf0bf82ab23cb8e82e6d

    • SHA512

      792c756a75a44846473d71ac7c8c8f64d274cbb6db78fbb3ae258e5a89fe9f613308f0728049dc4d3f58d36a7bb067da1a48e89b9b8e86139e168707ae5f7fe9

    • SSDEEP

      3072:UT/rQV26xsrUXM2vxxxgsdHk3BdauodKgkp4W/F418PWZ8m1XFzQc5uZtEfgnDNf:ULrV62wZyrauoUu7YDNyBReR

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks