General

  • Target

    8541b38591cd6f1fb7c50598eb1f2998fce2b2be7ee6c332793b4f9055ce6514N

  • Size

    72KB

  • Sample

    240919-1yx95atclr

  • MD5

    404359bf50746fccd541bf14079ce2e0

  • SHA1

    af3e62c324560fe16ae96dc55e797b982cc39b86

  • SHA256

    8541b38591cd6f1fb7c50598eb1f2998fce2b2be7ee6c332793b4f9055ce6514

  • SHA512

    2673c42cd7ef7bed73eceb0496e470f9573af69e708e80539354427bb6885f73a947a668ad94e3491c8fc9cd9c764a9d5d86c5ac6606d50d16b7416c810096ca

  • SSDEEP

    1536:IE+NrG7P3ICC6gPk/IIQF2FLWdKJ01707HMb+KR0Nc8QsJq39:Z+ca6iKIIA4LWdKJNHe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

44.209.142.115:61416

Targets

    • Target

      8541b38591cd6f1fb7c50598eb1f2998fce2b2be7ee6c332793b4f9055ce6514N

    • Size

      72KB

    • MD5

      404359bf50746fccd541bf14079ce2e0

    • SHA1

      af3e62c324560fe16ae96dc55e797b982cc39b86

    • SHA256

      8541b38591cd6f1fb7c50598eb1f2998fce2b2be7ee6c332793b4f9055ce6514

    • SHA512

      2673c42cd7ef7bed73eceb0496e470f9573af69e708e80539354427bb6885f73a947a668ad94e3491c8fc9cd9c764a9d5d86c5ac6606d50d16b7416c810096ca

    • SSDEEP

      1536:IE+NrG7P3ICC6gPk/IIQF2FLWdKJ01707HMb+KR0Nc8QsJq39:Z+ca6iKIIA4LWdKJNHe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks