General

  • Target

    cc1641d7d93355bdc1e7369b7177f7f44f7c431f8c01335283631d37b9a095c0

  • Size

    42KB

  • Sample

    240919-lavrrs1dka

  • MD5

    5b4b97d943c96f04b84256f69bdc7987

  • SHA1

    d2ab8b048b59a08c44182c9dc1073cd01fc5f45c

  • SHA256

    cc1641d7d93355bdc1e7369b7177f7f44f7c431f8c01335283631d37b9a095c0

  • SHA512

    9293457499311e74f585d800a6c17cbacf49cfac76dab2b534009512be2b52c847f55010ddf53058dcdef9d078f8682add50007efa6ad8315298af2ced28a0e9

  • SSDEEP

    384:pEpfFCjt8RcCwyqpoSM7wlVCWwLC91WVNVlb4Md9NiRh:pKtm8RcCVqPEw2WwLFVDlbDN4h

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.9.131:3333

Targets

    • Target

      cc1641d7d93355bdc1e7369b7177f7f44f7c431f8c01335283631d37b9a095c0

    • Size

      42KB

    • MD5

      5b4b97d943c96f04b84256f69bdc7987

    • SHA1

      d2ab8b048b59a08c44182c9dc1073cd01fc5f45c

    • SHA256

      cc1641d7d93355bdc1e7369b7177f7f44f7c431f8c01335283631d37b9a095c0

    • SHA512

      9293457499311e74f585d800a6c17cbacf49cfac76dab2b534009512be2b52c847f55010ddf53058dcdef9d078f8682add50007efa6ad8315298af2ced28a0e9

    • SSDEEP

      384:pEpfFCjt8RcCwyqpoSM7wlVCWwLC91WVNVlb4Md9NiRh:pKtm8RcCVqPEw2WwLFVDlbDN4h

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks