General

  • Target

    c777912478154ed8423306a8d5186d323ec413f325e4f9c57015a424917f2d55

  • Size

    1.3MB

  • Sample

    240423-g11y9aeb38

  • MD5

    253b37c3deaf1e2806d8d98859f71748

  • SHA1

    dca5e4da5c91e2a17b5c1eff7be6951b5d1bf9f6

  • SHA256

    c777912478154ed8423306a8d5186d323ec413f325e4f9c57015a424917f2d55

  • SHA512

    c3ddc68dcf38d93e5f573e5760465c2f69b996565d36ec06f3d16c10362c7b444032bb612c147600f33c18e332fad0cfe1bbdbc98f0d5eeaa95bac1f76b440f1

  • SSDEEP

    24576:eDNJij+IG0b2K8u3Y2VKndCZJfVOV0tmJ:cLi+InC

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.2.22:4444

Targets

    • Target

      c777912478154ed8423306a8d5186d323ec413f325e4f9c57015a424917f2d55

    • Size

      1.3MB

    • MD5

      253b37c3deaf1e2806d8d98859f71748

    • SHA1

      dca5e4da5c91e2a17b5c1eff7be6951b5d1bf9f6

    • SHA256

      c777912478154ed8423306a8d5186d323ec413f325e4f9c57015a424917f2d55

    • SHA512

      c3ddc68dcf38d93e5f573e5760465c2f69b996565d36ec06f3d16c10362c7b444032bb612c147600f33c18e332fad0cfe1bbdbc98f0d5eeaa95bac1f76b440f1

    • SSDEEP

      24576:eDNJij+IG0b2K8u3Y2VKndCZJfVOV0tmJ:cLi+InC

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks