General

  • Target

    ff03aa30507886fb9b17ed8cec62be7bcffd114a8630727943d391383b409dd2.exe

  • Size

    139KB

  • Sample

    250102-h55cxasqdr

  • MD5

    53fafdd8e50cb5d3f431d42a6b36b877

  • SHA1

    acaafccc81957e102d55e4ce1129c61e539add00

  • SHA256

    ff03aa30507886fb9b17ed8cec62be7bcffd114a8630727943d391383b409dd2

  • SHA512

    e1e61adbf187ef1d1b399b0932f322f6f3d49353544013d9a4dfc95b95837e57f84083e091c21151e6ffe50dccefa71d2c3f0aaecabb38cb57870a825bc4da6f

  • SSDEEP

    3072:yXEqQVkIyXgFSynAFw8JFBVKOMwwJ8zEOnG/P2:yXRQGIJ+Fw8JFzcLOnG/O

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.1.20:123

Targets

    • Target

      ff03aa30507886fb9b17ed8cec62be7bcffd114a8630727943d391383b409dd2.exe

    • Size

      139KB

    • MD5

      53fafdd8e50cb5d3f431d42a6b36b877

    • SHA1

      acaafccc81957e102d55e4ce1129c61e539add00

    • SHA256

      ff03aa30507886fb9b17ed8cec62be7bcffd114a8630727943d391383b409dd2

    • SHA512

      e1e61adbf187ef1d1b399b0932f322f6f3d49353544013d9a4dfc95b95837e57f84083e091c21151e6ffe50dccefa71d2c3f0aaecabb38cb57870a825bc4da6f

    • SSDEEP

      3072:yXEqQVkIyXgFSynAFw8JFBVKOMwwJ8zEOnG/P2:yXRQGIJ+Fw8JFzcLOnG/O

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks