General

  • Target

    17a4c5ee382851db7666297799750126bdb06918b062784c51d2c6f2d6e0ddb1N.exe

  • Size

    97KB

  • Sample

    240924-y15e4swfmd

  • MD5

    49d558fc52c18d98eac6a2e8b9e0b510

  • SHA1

    303936d01a32c8d5a714e756de7c279cc01afd84

  • SHA256

    17a4c5ee382851db7666297799750126bdb06918b062784c51d2c6f2d6e0ddb1

  • SHA512

    ba7df6b63e051c4ba81522676640259b11c78a421641293465bac03fdc9efb1e670ce59f87bb41b06966d19fd5c4203dfaa48ae0da844bd1530a65cd079fb23e

  • SSDEEP

    1536:rhYegqtFyEQYiszWISCGWG7Bf8BPrss6/hLGKrwS:zXGWGZF

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.135:8080

Targets

    • Target

      17a4c5ee382851db7666297799750126bdb06918b062784c51d2c6f2d6e0ddb1N.exe

    • Size

      97KB

    • MD5

      49d558fc52c18d98eac6a2e8b9e0b510

    • SHA1

      303936d01a32c8d5a714e756de7c279cc01afd84

    • SHA256

      17a4c5ee382851db7666297799750126bdb06918b062784c51d2c6f2d6e0ddb1

    • SHA512

      ba7df6b63e051c4ba81522676640259b11c78a421641293465bac03fdc9efb1e670ce59f87bb41b06966d19fd5c4203dfaa48ae0da844bd1530a65cd079fb23e

    • SSDEEP

      1536:rhYegqtFyEQYiszWISCGWG7Bf8BPrss6/hLGKrwS:zXGWGZF

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks