General

  • Target

    3d1061daa4eee9a94fe0b2252dd91316

  • Size

    46KB

  • Sample

    240101-rjbm5scccm

  • MD5

    3d1061daa4eee9a94fe0b2252dd91316

  • SHA1

    695e283f668f7222c5eef4cbc9d33b7aa4ffd03f

  • SHA256

    5ccd6386f489744bb54bd86d1b145c21064baa52c162483c548f15926dcb9625

  • SHA512

    aa345229d917b5d90ae51fe63440ead165a30bffadfebaf95d3da66a1f2a9ae24a5db25856f6cb7925f8fd90a9bedf6731ca115d30744e011252ee9a43b73675

  • SSDEEP

    768:IjIyKOpZ2nreZ3OCKP0DF0aH/5x/qlgpJ/5CfZr5wQInos4ZbVNIuyf0W6V2Dqu3:IsvOpZlZRF1fykQRRhfTi0TWkq3

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp_allports

C2

192.168.235.128:1

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      3d1061daa4eee9a94fe0b2252dd91316

    • Size

      46KB

    • MD5

      3d1061daa4eee9a94fe0b2252dd91316

    • SHA1

      695e283f668f7222c5eef4cbc9d33b7aa4ffd03f

    • SHA256

      5ccd6386f489744bb54bd86d1b145c21064baa52c162483c548f15926dcb9625

    • SHA512

      aa345229d917b5d90ae51fe63440ead165a30bffadfebaf95d3da66a1f2a9ae24a5db25856f6cb7925f8fd90a9bedf6731ca115d30744e011252ee9a43b73675

    • SSDEEP

      768:IjIyKOpZ2nreZ3OCKP0DF0aH/5x/qlgpJ/5CfZr5wQInos4ZbVNIuyf0W6V2Dqu3:IsvOpZlZRF1fykQRRhfTi0TWkq3

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks