General

  • Target

    0b364a6244fbc30d903a85d6322e9021300fcf6b6ce1263ab0a6fb4ec1b180e8

  • Size

    72KB

  • Sample

    240422-xayn7seg2t

  • MD5

    f284cd9810e43eaa87b84343c07125df

  • SHA1

    c2a9671a4489e2a85e44e4f3cb9809aeb045f4b2

  • SHA256

    0b364a6244fbc30d903a85d6322e9021300fcf6b6ce1263ab0a6fb4ec1b180e8

  • SHA512

    ce88fbcb513d0e0d1e7e0cd34027d4cc08101f3a1f5f28001700d4f175e0ae3b2e9d4b48304e08eb89d0f18cbb7d526f99e38905ba7e75a1b3682de54acbf8b7

  • SSDEEP

    1536:IYeFgCq3In8knyqOZRy+Winc/tpXMb+KR0Nc8QsJq39:ugC7n7nm7yficlpXe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      0b364a6244fbc30d903a85d6322e9021300fcf6b6ce1263ab0a6fb4ec1b180e8

    • Size

      72KB

    • MD5

      f284cd9810e43eaa87b84343c07125df

    • SHA1

      c2a9671a4489e2a85e44e4f3cb9809aeb045f4b2

    • SHA256

      0b364a6244fbc30d903a85d6322e9021300fcf6b6ce1263ab0a6fb4ec1b180e8

    • SHA512

      ce88fbcb513d0e0d1e7e0cd34027d4cc08101f3a1f5f28001700d4f175e0ae3b2e9d4b48304e08eb89d0f18cbb7d526f99e38905ba7e75a1b3682de54acbf8b7

    • SSDEEP

      1536:IYeFgCq3In8knyqOZRy+Winc/tpXMb+KR0Nc8QsJq39:ugC7n7nm7yficlpXe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks