General

  • Target

    8aea267d26fa51fc94d8ac61f063cd6c9a9e83dcfd068c6518d5bca4289dd471

  • Size

    353KB

  • Sample

    240919-ptx8saydra

  • MD5

    8c3df460e592f9d701577e252bfe5577

  • SHA1

    4f9cddcf97540ec8a14be22380ab22b672cba79d

  • SHA256

    8aea267d26fa51fc94d8ac61f063cd6c9a9e83dcfd068c6518d5bca4289dd471

  • SHA512

    2242b4e3802df408203f52d203c605576fa13843ac6c16569130b6bdc67fdf7360345806a7e6e2bd0a391adbbf0bcbe64c67f6c053572abe2828528968b4659d

  • SSDEEP

    3072:9It3tMBPMzEFCrU+LuD1NjKoQMQJvgZKT/Gfx4WNSKoQMQJvgZKb/GP:it3tEP2UPzjQJTT/MBiQJTb/8

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

38.207.133.152:15765

Targets

    • Target

      8aea267d26fa51fc94d8ac61f063cd6c9a9e83dcfd068c6518d5bca4289dd471

    • Size

      353KB

    • MD5

      8c3df460e592f9d701577e252bfe5577

    • SHA1

      4f9cddcf97540ec8a14be22380ab22b672cba79d

    • SHA256

      8aea267d26fa51fc94d8ac61f063cd6c9a9e83dcfd068c6518d5bca4289dd471

    • SHA512

      2242b4e3802df408203f52d203c605576fa13843ac6c16569130b6bdc67fdf7360345806a7e6e2bd0a391adbbf0bcbe64c67f6c053572abe2828528968b4659d

    • SSDEEP

      3072:9It3tMBPMzEFCrU+LuD1NjKoQMQJvgZKT/Gfx4WNSKoQMQJvgZKb/GP:it3tEP2UPzjQJTT/MBiQJTb/8

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks