General

  • Target

    0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.bin

  • Size

    1.5MB

  • Sample

    240923-y3dp6stclf

  • MD5

    a6e5b1fb6d820de1eab89f177893ca8d

  • SHA1

    50955eb588e6a915c6b017c84f8e62a7acefc647

  • SHA256

    0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849

  • SHA512

    9cf4efcda9ec69ba36d035d7e727b49e01f598644ba7ed88e8563c39560845b1be2d88ac507214c30d62609495cd386b52f9861ed7458b1d9f44765fd5c70534

  • SSDEEP

    24576:UVvAf3GbD17f+xGvqTQQc3iFwInAKPfzMc2NAjBWm5HrUq3IbWpeFy:UVPp1/SFwg1bMdN6Wm5HQq3YWUg

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.134:50000

Targets

    • Target

      0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.bin

    • Size

      1.5MB

    • MD5

      a6e5b1fb6d820de1eab89f177893ca8d

    • SHA1

      50955eb588e6a915c6b017c84f8e62a7acefc647

    • SHA256

      0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849

    • SHA512

      9cf4efcda9ec69ba36d035d7e727b49e01f598644ba7ed88e8563c39560845b1be2d88ac507214c30d62609495cd386b52f9861ed7458b1d9f44765fd5c70534

    • SSDEEP

      24576:UVvAf3GbD17f+xGvqTQQc3iFwInAKPfzMc2NAjBWm5HrUq3IbWpeFy:UVPp1/SFwg1bMdN6Wm5HQq3YWUg

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks