General

  • Target

    fd2c88068aecfddcb7779de51b56ccf7d1a442fede7568a76960845368136651N

  • Size

    72KB

  • Sample

    240921-k74v9svdkk

  • MD5

    b99ae1ca49ea792f41f7018400ecb0e0

  • SHA1

    aee9c7b740479024079882289e6c6b38a265a011

  • SHA256

    fd2c88068aecfddcb7779de51b56ccf7d1a442fede7568a76960845368136651

  • SHA512

    1a6c834af8c5dca01f0dbfa02ba9f64b419e8eb1cf270ba7742514597623333cf092057b6225fed951a8fcba4e7c97acac34647cc6d39bb064ee2ef7c1fc47b5

  • SSDEEP

    1536:I2fi6/VpHn9UHcBCwCYRYYRtXkU1jKf2tFBsMb+KR0Nc8QsJq39:3fiUVZ9tC9jYh1/Ke0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

217.18.139.10:51140

Targets

    • Target

      fd2c88068aecfddcb7779de51b56ccf7d1a442fede7568a76960845368136651N

    • Size

      72KB

    • MD5

      b99ae1ca49ea792f41f7018400ecb0e0

    • SHA1

      aee9c7b740479024079882289e6c6b38a265a011

    • SHA256

      fd2c88068aecfddcb7779de51b56ccf7d1a442fede7568a76960845368136651

    • SHA512

      1a6c834af8c5dca01f0dbfa02ba9f64b419e8eb1cf270ba7742514597623333cf092057b6225fed951a8fcba4e7c97acac34647cc6d39bb064ee2ef7c1fc47b5

    • SSDEEP

      1536:I2fi6/VpHn9UHcBCwCYRYYRtXkU1jKf2tFBsMb+KR0Nc8QsJq39:3fiUVZ9tC9jYh1/Ke0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks