General

  • Target

    373e842add73b4a027719d13973412c68439746e09a972bbc33631f2a86a5a40N.exe

  • Size

    2.5MB

  • Sample

    250108-h7rvlaskbq

  • MD5

    bc4b78ea6cf4202079a897daef37f450

  • SHA1

    fed436250222eae2964c4dac39e44d111d1233da

  • SHA256

    373e842add73b4a027719d13973412c68439746e09a972bbc33631f2a86a5a40

  • SHA512

    ec0ae258d192740d0af462166a0e055e7c97e7109d750e9f6c94af3b2b32099cbe1b42b152098532f7dc138c1a018dd0116d2f9b35cc76f53bf31f249081286a

  • SSDEEP

    49152:J7t9umhoj35iGpviEhwuZ3ZX3AVKAW4kliQvscLaq:gmirqGwuZ3ZnAB+iJcH

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.146.128:4444

Targets

    • Target

      373e842add73b4a027719d13973412c68439746e09a972bbc33631f2a86a5a40N.exe

    • Size

      2.5MB

    • MD5

      bc4b78ea6cf4202079a897daef37f450

    • SHA1

      fed436250222eae2964c4dac39e44d111d1233da

    • SHA256

      373e842add73b4a027719d13973412c68439746e09a972bbc33631f2a86a5a40

    • SHA512

      ec0ae258d192740d0af462166a0e055e7c97e7109d750e9f6c94af3b2b32099cbe1b42b152098532f7dc138c1a018dd0116d2f9b35cc76f53bf31f249081286a

    • SSDEEP

      49152:J7t9umhoj35iGpviEhwuZ3ZX3AVKAW4kliQvscLaq:gmirqGwuZ3ZnAB+iJcH

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks