General

  • Target

    aifortnite.exe

  • Size

    72KB

  • Sample

    250330-xlck4svsbw

  • MD5

    ec3e620af2f13f4decab94c736fc7b32

  • SHA1

    fc9dc2cd3a68738caace83a951fd58dd25c81d45

  • SHA256

    ca2b1eecfa86ad5966a6c70f50d4f5b2d044ed1139edc8aad4ccc66f5dbe4283

  • SHA512

    4eaf6f7c067e8745381e2206acaad027608e052679d9aa0cc963c8ad22aff56c1c245fc297a0f65e41b1b1745833ff11f41c7ffad42014923b2b435e979b2dfc

  • SSDEEP

    1536:I9EH7LClOPGSE5u2v6ZvM7A4HhT62YGcUO96xhhMb+KR0Nc8QsJq39:IEH7LwI2CZvM7A4BT61Gcv9ihe0Nc8Qb

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.148:12345

Targets

    • Target

      aifortnite.exe

    • Size

      72KB

    • MD5

      ec3e620af2f13f4decab94c736fc7b32

    • SHA1

      fc9dc2cd3a68738caace83a951fd58dd25c81d45

    • SHA256

      ca2b1eecfa86ad5966a6c70f50d4f5b2d044ed1139edc8aad4ccc66f5dbe4283

    • SHA512

      4eaf6f7c067e8745381e2206acaad027608e052679d9aa0cc963c8ad22aff56c1c245fc297a0f65e41b1b1745833ff11f41c7ffad42014923b2b435e979b2dfc

    • SSDEEP

      1536:I9EH7LClOPGSE5u2v6ZvM7A4HhT62YGcUO96xhhMb+KR0Nc8QsJq39:IEH7LwI2CZvM7A4BT61Gcv9ihe0Nc8Qb

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks