General

  • Target

    73ed7d70099aead30221108e3aee6e05f8fdeaea90de54aee1d2935e57bf4491N

  • Size

    72KB

  • Sample

    240920-bf868s1apb

  • MD5

    5ef9a10663ab100c5b3993c97b273460

  • SHA1

    02cefd2110fa98d18ac7bb71503f9a6868658a9e

  • SHA256

    73ed7d70099aead30221108e3aee6e05f8fdeaea90de54aee1d2935e57bf4491

  • SHA512

    d50ece59056ea3a1f4789e1b760c57ef6b93f01ec42dd314eda871c7c8756871d47aa8622556951c00f5753dd84e079a68ec46d0dabe9f1268936ba9429cf7ba

  • SSDEEP

    1536:IArEERWTw9hv4FQCBFp1bukpPy823OJ2g4GMb+KR0Nc8QsJq39:7JkTw9h2QCLKkp917e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

239.73.4.97:21879

Targets

    • Target

      73ed7d70099aead30221108e3aee6e05f8fdeaea90de54aee1d2935e57bf4491N

    • Size

      72KB

    • MD5

      5ef9a10663ab100c5b3993c97b273460

    • SHA1

      02cefd2110fa98d18ac7bb71503f9a6868658a9e

    • SHA256

      73ed7d70099aead30221108e3aee6e05f8fdeaea90de54aee1d2935e57bf4491

    • SHA512

      d50ece59056ea3a1f4789e1b760c57ef6b93f01ec42dd314eda871c7c8756871d47aa8622556951c00f5753dd84e079a68ec46d0dabe9f1268936ba9429cf7ba

    • SSDEEP

      1536:IArEERWTw9hv4FQCBFp1bukpPy823OJ2g4GMb+KR0Nc8QsJq39:7JkTw9h2QCLKkp917e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks