General

  • Target

    53337f76e300133786b572eb4edced81d37493e20370254ab017ae96a1d541e9

  • Size

    349KB

  • Sample

    240919-ptyjjsydrb

  • MD5

    5bce3b9e2dd133b49af440c6fa32cad9

  • SHA1

    0104d07771300286a9a36e106d787cf22b6ddfdd

  • SHA256

    53337f76e300133786b572eb4edced81d37493e20370254ab017ae96a1d541e9

  • SHA512

    b2c9bea27de3b66cb406098c1ce6d8a623a27732e5e5d2112402ed2d9073c6c0f338d81f1983aca80aeb3da9913c24f930db93e17ba8bd4f8d70ed3784b80ad5

  • SSDEEP

    3072:eIt3tMBPMzEFCrU+LuDLNjKoQMQJvgZKT/GfS0th4NQKoQMQJvgZKb/GP:xt3tEP2UPxjQJTT/MS0tYMQJTb/8

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

38.207.133.152:15765

Targets

    • Target

      53337f76e300133786b572eb4edced81d37493e20370254ab017ae96a1d541e9

    • Size

      349KB

    • MD5

      5bce3b9e2dd133b49af440c6fa32cad9

    • SHA1

      0104d07771300286a9a36e106d787cf22b6ddfdd

    • SHA256

      53337f76e300133786b572eb4edced81d37493e20370254ab017ae96a1d541e9

    • SHA512

      b2c9bea27de3b66cb406098c1ce6d8a623a27732e5e5d2112402ed2d9073c6c0f338d81f1983aca80aeb3da9913c24f930db93e17ba8bd4f8d70ed3784b80ad5

    • SSDEEP

      3072:eIt3tMBPMzEFCrU+LuDLNjKoQMQJvgZKT/GfS0th4NQKoQMQJvgZKb/GP:xt3tEP2UPxjQJTT/MS0tYMQJTb/8

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks