General

  • Target

    chrome.exe

  • Size

    72KB

  • Sample

    240607-hybf9acc5s

  • MD5

    e51fbe04ea8ba175172e49d0a204e5d1

  • SHA1

    b08baa03a43949ac9b66f3e0812725f30494e5da

  • SHA256

    4a44a0c34aa729b95c22843dd65ccd87bfa2c1c27d25a51e31c856f5fa38b36c

  • SHA512

    f9ba23e2efa30389affbfb8e8377590cc95d2fd7f76e3342d2e056ea35b508420a6231d55a1c459f9f52812def194e1e1d000929c6fa5f1567729f98b0c5e111

  • SSDEEP

    1536:IudCCz/vygMp1hzX+idQi0Mb+KR0Nc8QsJq39:BdCCdYz3QVe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

210.61.46.67:8080

Targets

    • Target

      chrome.exe

    • Size

      72KB

    • MD5

      e51fbe04ea8ba175172e49d0a204e5d1

    • SHA1

      b08baa03a43949ac9b66f3e0812725f30494e5da

    • SHA256

      4a44a0c34aa729b95c22843dd65ccd87bfa2c1c27d25a51e31c856f5fa38b36c

    • SHA512

      f9ba23e2efa30389affbfb8e8377590cc95d2fd7f76e3342d2e056ea35b508420a6231d55a1c459f9f52812def194e1e1d000929c6fa5f1567729f98b0c5e111

    • SSDEEP

      1536:IudCCz/vygMp1hzX+idQi0Mb+KR0Nc8QsJq39:BdCCdYz3QVe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks