General

  • Target

    7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4

  • Size

    85KB

  • Sample

    241113-zk89ssyhmj

  • MD5

    d95dddfe3f947cab8cf5f3f54e89568a

  • SHA1

    acff9bf9ff5f59824c04771427531b851fe2b862

  • SHA256

    7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4

  • SHA512

    6872165fbcecf93df2b1705d0eca398535ee0c7e00362729833b6ae64ec6852fff80140029ddcb038617a5524af2b03dfe0a6d3ef311c086d695c1cc83b7a9aa

  • SSDEEP

    1536:qKUAl4uglgtS5fpGI1X1O9BKgYqQKBuAhqQzhBl17AsWvDBcdPeaxGQZE/:7HonT1X9qQKEA3lvPeaxGQZE/

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.219:3333

Targets

    • Target

      7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4

    • Size

      85KB

    • MD5

      d95dddfe3f947cab8cf5f3f54e89568a

    • SHA1

      acff9bf9ff5f59824c04771427531b851fe2b862

    • SHA256

      7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4

    • SHA512

      6872165fbcecf93df2b1705d0eca398535ee0c7e00362729833b6ae64ec6852fff80140029ddcb038617a5524af2b03dfe0a6d3ef311c086d695c1cc83b7a9aa

    • SSDEEP

      1536:qKUAl4uglgtS5fpGI1X1O9BKgYqQKBuAhqQzhBl17AsWvDBcdPeaxGQZE/:7HonT1X9qQKEA3lvPeaxGQZE/

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks