General

  • Target

    rReversehttpsExe.exe

  • Size

    72KB

  • Sample

    241104-xqb55swbln

  • MD5

    2bbfef7a1f3451b005cf0dd3d4e275da

  • SHA1

    7f8aa8879b0e64cab0dfbdf3390665dec9e652ce

  • SHA256

    65f1634212dadb9f6291190de6e4afd74cfd509e9c1d623f686ad9680512e5a1

  • SHA512

    c157a9d09398fb49434c5b55edc8d120110195196dfac639a87f7e2c3c77e2a96159fea7d0bd4f6b3f06ab73c939e88a0809a3da9d52660ea206b3faa6e70912

  • SSDEEP

    1536:IHmw1yN0JCWjR+U/RUkivw5ZxisGip/MMkpjeMb+KR0Nc8QsJq39:ioSJCWjRuxo4GU31ee0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      rReversehttpsExe.exe

    • Size

      72KB

    • MD5

      2bbfef7a1f3451b005cf0dd3d4e275da

    • SHA1

      7f8aa8879b0e64cab0dfbdf3390665dec9e652ce

    • SHA256

      65f1634212dadb9f6291190de6e4afd74cfd509e9c1d623f686ad9680512e5a1

    • SHA512

      c157a9d09398fb49434c5b55edc8d120110195196dfac639a87f7e2c3c77e2a96159fea7d0bd4f6b3f06ab73c939e88a0809a3da9d52660ea206b3faa6e70912

    • SSDEEP

      1536:IHmw1yN0JCWjR+U/RUkivw5ZxisGip/MMkpjeMb+KR0Nc8QsJq39:ioSJCWjRuxo4GU31ee0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks