General

  • Target

    a5832da88af02d18a19ced73509e983e030be06f88399076210a321b7660c233N

  • Size

    72KB

  • Sample

    240919-sygy5swfnq

  • MD5

    987dbb59d61bcd08615ee6ae6ccc2ba0

  • SHA1

    d11d44f46caa5490243922dff3fd42951ac6530d

  • SHA256

    a5832da88af02d18a19ced73509e983e030be06f88399076210a321b7660c233

  • SHA512

    ef9602b87ba655b78f6f1452705d99201cfd9391c3868762e890d0df147dc6fb0c82c6e4ff9510702c5252a5f4ee384307ce9431e0e2c1f2009f9e35c8bb48d1

  • SSDEEP

    1536:Is0rK9u96mEdWbabe3tp+tg8uYl/ihJTQfMb+KR0Nc8QsJq39:J0rv9gdWbaKtp+thvqTQfe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

154.230.37.162:18572

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      a5832da88af02d18a19ced73509e983e030be06f88399076210a321b7660c233N

    • Size

      72KB

    • MD5

      987dbb59d61bcd08615ee6ae6ccc2ba0

    • SHA1

      d11d44f46caa5490243922dff3fd42951ac6530d

    • SHA256

      a5832da88af02d18a19ced73509e983e030be06f88399076210a321b7660c233

    • SHA512

      ef9602b87ba655b78f6f1452705d99201cfd9391c3868762e890d0df147dc6fb0c82c6e4ff9510702c5252a5f4ee384307ce9431e0e2c1f2009f9e35c8bb48d1

    • SSDEEP

      1536:Is0rK9u96mEdWbabe3tp+tg8uYl/ihJTQfMb+KR0Nc8QsJq39:J0rv9gdWbaKtp+thvqTQfe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks