General

  • Target

    13618aecc3be81cdc7fde9d074b8098c5ed891b042823082428090e4cd271e42

  • Size

    377KB

  • Sample

    250121-gdv5gsypbm

  • MD5

    5f322bf768dafdaac329169bc1573175

  • SHA1

    e5ca22a062c9cb8ad425245ca8d937dcc557497d

  • SHA256

    13618aecc3be81cdc7fde9d074b8098c5ed891b042823082428090e4cd271e42

  • SHA512

    136c0242b6471b2697c483cddc0ebe07bdae73b11bec8024523e62e26426dc0510168eef7a0c5dab25844ccbb5f3254f48a3aea456f40b0be15bc9af2bb3b2d1

  • SSDEEP

    6144:KpAI29WOAFYF6814r3hO/F+nFZABodVd1ms16Q14r3hO/F+nFZABQd:Kp7299F6hrysFZxDdD16trysFZr

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.59.134:9998

Targets

    • Target

      13618aecc3be81cdc7fde9d074b8098c5ed891b042823082428090e4cd271e42

    • Size

      377KB

    • MD5

      5f322bf768dafdaac329169bc1573175

    • SHA1

      e5ca22a062c9cb8ad425245ca8d937dcc557497d

    • SHA256

      13618aecc3be81cdc7fde9d074b8098c5ed891b042823082428090e4cd271e42

    • SHA512

      136c0242b6471b2697c483cddc0ebe07bdae73b11bec8024523e62e26426dc0510168eef7a0c5dab25844ccbb5f3254f48a3aea456f40b0be15bc9af2bb3b2d1

    • SSDEEP

      6144:KpAI29WOAFYF6814r3hO/F+nFZABodVd1ms16Q14r3hO/F+nFZABQd:Kp7299F6hrysFZxDdD16trysFZr

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks