General

  • Target

    9e6c00d495107c977eda44aee56a8a54225cc0e6f15fa084161ffe8cde6ab622.exe

  • Size

    17KB

  • Sample

    240307-dbkzysdf24

  • MD5

    5485359ac4238d5954efe0905be1b666

  • SHA1

    adf8028922e6cff8bb53341135d71537f72740ea

  • SHA256

    9e6c00d495107c977eda44aee56a8a54225cc0e6f15fa084161ffe8cde6ab622

  • SHA512

    fc183cac0e50a01a94ed07aef297debd8fd206108ad7d35e7fd1b052d9a267062466e68a22a49464fd15ec819faa7fc0f1a82b34d2a6332f147b4a214ca22968

  • SSDEEP

    384:zEEoLO56ayzcMj+u+XvueaWwjuYgSwDpwmc6MnfTtHF0:gE8O56lcVu+X0aYgSwDrcZfTNa

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.8:8080

Targets

    • Target

      9e6c00d495107c977eda44aee56a8a54225cc0e6f15fa084161ffe8cde6ab622.exe

    • Size

      17KB

    • MD5

      5485359ac4238d5954efe0905be1b666

    • SHA1

      adf8028922e6cff8bb53341135d71537f72740ea

    • SHA256

      9e6c00d495107c977eda44aee56a8a54225cc0e6f15fa084161ffe8cde6ab622

    • SHA512

      fc183cac0e50a01a94ed07aef297debd8fd206108ad7d35e7fd1b052d9a267062466e68a22a49464fd15ec819faa7fc0f1a82b34d2a6332f147b4a214ca22968

    • SSDEEP

      384:zEEoLO56ayzcMj+u+XvueaWwjuYgSwDpwmc6MnfTtHF0:gE8O56lcVu+X0aYgSwDrcZfTNa

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks