General

  • Target

    a8468a7b20ae59be91f54981f7ee4830N

  • Size

    72KB

  • Sample

    240907-1jet8syhmh

  • MD5

    a8468a7b20ae59be91f54981f7ee4830

  • SHA1

    0996f20131814bb0ac7fb081ef2ca5809b76d126

  • SHA256

    8de9c60fd8418db5f644efd5306d72723b828c54f5a973683606ffc249443106

  • SHA512

    957252fa640aa8611b466947118e4cbe25f9bdbe30f90d37ce7c8a90721f2f07c12441d619d5883d4a75e9399f7623c9f2a67286033f47b63f42dd69d44be82d

  • SSDEEP

    1536:IDcTKEq3tSF3m0+sLZC3O9w//m/OqDPMb+KR0Nc8QsJq39:WcTKDAL+KKG/OqDPe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.211.55.15:4444

Targets

    • Target

      a8468a7b20ae59be91f54981f7ee4830N

    • Size

      72KB

    • MD5

      a8468a7b20ae59be91f54981f7ee4830

    • SHA1

      0996f20131814bb0ac7fb081ef2ca5809b76d126

    • SHA256

      8de9c60fd8418db5f644efd5306d72723b828c54f5a973683606ffc249443106

    • SHA512

      957252fa640aa8611b466947118e4cbe25f9bdbe30f90d37ce7c8a90721f2f07c12441d619d5883d4a75e9399f7623c9f2a67286033f47b63f42dd69d44be82d

    • SSDEEP

      1536:IDcTKEq3tSF3m0+sLZC3O9w//m/OqDPMb+KR0Nc8QsJq39:WcTKDAL+KKG/OqDPe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks