General

  • Target

    938bd315c2fcf3e0e46be7ff5f073ac4b3d512c038eb2e0a18a25f3ac89847c7N

  • Size

    72KB

  • Sample

    240917-g9kzdsyfle

  • MD5

    629e8cfc8349f95bd8589f234bf2cf10

  • SHA1

    2edea2b1a9fc307ce6460a3dae6acef4894acb1e

  • SHA256

    938bd315c2fcf3e0e46be7ff5f073ac4b3d512c038eb2e0a18a25f3ac89847c7

  • SHA512

    d03b9a390d456e7a8edabba23d87b51c5244b22dc51028447d4e70fb484a1052bd40ec6d5f63bec39fdc0ebc15831e42b2159c6bd9903c3f3d488c546cd746c5

  • SSDEEP

    1536:IBuSSgGfgEDqiQW7onAgMC1bgApdhliaMb+KR0Nc8QsJq39:VDq67oG8bg63he0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      938bd315c2fcf3e0e46be7ff5f073ac4b3d512c038eb2e0a18a25f3ac89847c7N

    • Size

      72KB

    • MD5

      629e8cfc8349f95bd8589f234bf2cf10

    • SHA1

      2edea2b1a9fc307ce6460a3dae6acef4894acb1e

    • SHA256

      938bd315c2fcf3e0e46be7ff5f073ac4b3d512c038eb2e0a18a25f3ac89847c7

    • SHA512

      d03b9a390d456e7a8edabba23d87b51c5244b22dc51028447d4e70fb484a1052bd40ec6d5f63bec39fdc0ebc15831e42b2159c6bd9903c3f3d488c546cd746c5

    • SSDEEP

      1536:IBuSSgGfgEDqiQW7onAgMC1bgApdhliaMb+KR0Nc8QsJq39:VDq67oG8bg63he0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks