General

  • Target

    c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85cN

  • Size

    3.6MB

  • Sample

    241103-hmepjaxhkg

  • MD5

    0d885816e52ec425f1f398d5fc3067d0

  • SHA1

    43963df9679661943c26e0013e0d6b05cd80fcb9

  • SHA256

    c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85c

  • SHA512

    6d0e9a0db88de453f133972cf7ced5cc25dca465649e3b8cb71071a3c624b308accbf44003e315c12ca74a7c59f11e46af6fe039a053eccbaa1fdb5c32c458d4

  • SSDEEP

    98304:Ov9BPOfEV1ciAuipG08fMyZ1Uyv0PmSGrF28HgKMhyKfIpoJsku:OlEYciAuioRMy7J0P+rchyKfIpasku

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

120.26.166.249:4433

Targets

    • Target

      c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85cN

    • Size

      3.6MB

    • MD5

      0d885816e52ec425f1f398d5fc3067d0

    • SHA1

      43963df9679661943c26e0013e0d6b05cd80fcb9

    • SHA256

      c9cf535b848f423b39d7025a542b361010694da53689631d4a9ebe498b2cb85c

    • SHA512

      6d0e9a0db88de453f133972cf7ced5cc25dca465649e3b8cb71071a3c624b308accbf44003e315c12ca74a7c59f11e46af6fe039a053eccbaa1fdb5c32c458d4

    • SSDEEP

      98304:Ov9BPOfEV1ciAuipG08fMyZ1Uyv0PmSGrF28HgKMhyKfIpoJsku:OlEYciAuioRMy7J0P+rchyKfIpasku

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      05bf02da51e717f79f6b5cbea7bc0710

    • SHA1

      07471a64ef4dba9dc19ce68ae6cce683af7df86d

    • SHA256

      ca092ba7f275b0c9000098cdd1a9876fe8dc050fcb40a0e8a1ab8335236e9dc5

    • SHA512

      c09e475babd5eb675cdf903b2b754b8b68450a731cb520f3dcbf9abe0ed03d19256f009429977d3a51decb3a2a938be0b28dbafeb407409fa85e54da6dbaaad6

    • SSDEEP

      384:ESC43tPegZ3eBaRwCPOYY7nNYXCv/Yosa:EbTgZ3eBTCmrnNAx

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      466179e1c8ee8a1ff5e4427dbb6c4a01

    • SHA1

      eb607467009074278e4bd50c7eab400e95ae48f7

    • SHA256

      1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    • SHA512

      7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

    • SSDEEP

      192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks