General

  • Target

    34a542356ac8a3f6e367c6827b728e18e905c71574b3813f163e043f70aa3bfa

  • Size

    120KB

  • Sample

    220128-bfannsdebj

  • MD5

    0d0320878946a73749111e6c94bf1525

  • SHA1

    1e9b5c685640df11659aea7748d9bf3df70aadcf

  • SHA256

    34a542356ac8a3f6e367c6827b728e18e905c71574b3813f163e043f70aa3bfa

  • SHA512

    fc695dd905213d7b623d33d2fa9302399897970f3b8705182fa50e771dad13dac5d5d302a508cdc4f3fdb37122999f2d492188667b92050fe49a29abff53a8b1

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      34a542356ac8a3f6e367c6827b728e18e905c71574b3813f163e043f70aa3bfa

    • Size

      120KB

    • MD5

      0d0320878946a73749111e6c94bf1525

    • SHA1

      1e9b5c685640df11659aea7748d9bf3df70aadcf

    • SHA256

      34a542356ac8a3f6e367c6827b728e18e905c71574b3813f163e043f70aa3bfa

    • SHA512

      fc695dd905213d7b623d33d2fa9302399897970f3b8705182fa50e771dad13dac5d5d302a508cdc4f3fdb37122999f2d492188667b92050fe49a29abff53a8b1

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks