General

  • Target

    0664ea4f7b5899a1fdd8cb2337d5f43c9b5a0c47af4f629aab4e9989470aeec2

  • Size

    1.4MB

  • Sample

    240925-sn1cqssdjm

  • MD5

    a4b56b4982d5d31d972e5fb2c8f21a6a

  • SHA1

    c15e16df6ee4bd15d746053ab68e6a56c097b227

  • SHA256

    0664ea4f7b5899a1fdd8cb2337d5f43c9b5a0c47af4f629aab4e9989470aeec2

  • SHA512

    0b6944941049fcf8f57a6b622b4c695b68925eb3d8913b5c19c4fc7bd96f6abe59d2cfd7c4ac3be52b42f79c1e10110d61a28b20f4f0cece218804e715702cdb

  • SSDEEP

    24576:mWzNpYIUzAcFZPVUw1L9ub0VsfMzXGk1GUzwg3aPIJdTaKIe0MStS/o6ui2O:5c3vpJSMwgKk8KIeVSc/zui

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.221.129:4444

Targets

    • Target

      0664ea4f7b5899a1fdd8cb2337d5f43c9b5a0c47af4f629aab4e9989470aeec2

    • Size

      1.4MB

    • MD5

      a4b56b4982d5d31d972e5fb2c8f21a6a

    • SHA1

      c15e16df6ee4bd15d746053ab68e6a56c097b227

    • SHA256

      0664ea4f7b5899a1fdd8cb2337d5f43c9b5a0c47af4f629aab4e9989470aeec2

    • SHA512

      0b6944941049fcf8f57a6b622b4c695b68925eb3d8913b5c19c4fc7bd96f6abe59d2cfd7c4ac3be52b42f79c1e10110d61a28b20f4f0cece218804e715702cdb

    • SSDEEP

      24576:mWzNpYIUzAcFZPVUw1L9ub0VsfMzXGk1GUzwg3aPIJdTaKIe0MStS/o6ui2O:5c3vpJSMwgKk8KIeVSc/zui

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks