General

  • Target

    155883bbf2e724284ceaba37e0df36ed91296574b308964dbc3c33dbdd05c8db

  • Size

    349KB

  • Sample

    240919-v83pps1drd

  • MD5

    eb72a1cb3a6aec1b2d7d9befd08bc419

  • SHA1

    2b8146b79fd01cb29d96051abc571a27cd554374

  • SHA256

    155883bbf2e724284ceaba37e0df36ed91296574b308964dbc3c33dbdd05c8db

  • SHA512

    304126a17ead2d2d96d33da29b6efa009f3e52268e690ae5d0ecd711f9e9f2eeacae5cebf6fae5663cb412d5f7a8042b72ec6f0534c86c894679c13fc64cbdf9

  • SSDEEP

    3072:UIt3tMBPMzEFCrU+LuDSNjKoQMQJvgZKT/GfsSeNQKoQMQJvgZKb/GP:zt3tEP2UP4jQJTT/MOMQJTb/8

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

38.207.133.152:15765

Targets

    • Target

      155883bbf2e724284ceaba37e0df36ed91296574b308964dbc3c33dbdd05c8db

    • Size

      349KB

    • MD5

      eb72a1cb3a6aec1b2d7d9befd08bc419

    • SHA1

      2b8146b79fd01cb29d96051abc571a27cd554374

    • SHA256

      155883bbf2e724284ceaba37e0df36ed91296574b308964dbc3c33dbdd05c8db

    • SHA512

      304126a17ead2d2d96d33da29b6efa009f3e52268e690ae5d0ecd711f9e9f2eeacae5cebf6fae5663cb412d5f7a8042b72ec6f0534c86c894679c13fc64cbdf9

    • SSDEEP

      3072:UIt3tMBPMzEFCrU+LuDSNjKoQMQJvgZKT/GfsSeNQKoQMQJvgZKb/GP:zt3tEP2UP4jQJTT/MOMQJTb/8

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks