General

  • Target

    6c5c2ea6c56d1adf5b181cf159e01b655529681161897bd48cef0d2ee936c8e5N

  • Size

    72KB

  • Sample

    240917-1z3k8sxfkj

  • MD5

    c5d21f776b920a042fcf0bbd9a25d870

  • SHA1

    c226140377e7310936de1a5e105905941417136f

  • SHA256

    6c5c2ea6c56d1adf5b181cf159e01b655529681161897bd48cef0d2ee936c8e5

  • SHA512

    a19e7d2ccea639fd6a9df90b57aedf91ffc9854939e918bd3d2bab7eab9d31dd078fbfb20bf47cdabb541273384dc97e45cb5f8fd69fa7b93a35b99fbffff7a3

  • SSDEEP

    1536:InOphoSuU8rab4gUOS39g6eqMb+KR0Nc8QsJq39:eOHou8V5O+9g63e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

128.5.58.136:52418

Targets

    • Target

      6c5c2ea6c56d1adf5b181cf159e01b655529681161897bd48cef0d2ee936c8e5N

    • Size

      72KB

    • MD5

      c5d21f776b920a042fcf0bbd9a25d870

    • SHA1

      c226140377e7310936de1a5e105905941417136f

    • SHA256

      6c5c2ea6c56d1adf5b181cf159e01b655529681161897bd48cef0d2ee936c8e5

    • SHA512

      a19e7d2ccea639fd6a9df90b57aedf91ffc9854939e918bd3d2bab7eab9d31dd078fbfb20bf47cdabb541273384dc97e45cb5f8fd69fa7b93a35b99fbffff7a3

    • SSDEEP

      1536:InOphoSuU8rab4gUOS39g6eqMb+KR0Nc8QsJq39:eOHou8V5O+9g63e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks