General

  • Target

    dd45f4bab326a2d9a1eab543fd3f34584fb276c9c0f2ced514105511c293367f

  • Size

    85KB

  • Sample

    241113-zk9kkaslap

  • MD5

    ad19353c8bc17322f767b6d74b5abd64

  • SHA1

    f5a7c9815615d208427638547bac0e186b14a829

  • SHA256

    dd45f4bab326a2d9a1eab543fd3f34584fb276c9c0f2ced514105511c293367f

  • SHA512

    63fcdf6c0fac65a993f8be2cda5d0b4fd1fe53c7939947caa259a3ee012b411175751070e51a6e532d3fe8346e6e08da5cf7f2f02de4e4355090af26363bf058

  • SSDEEP

    1536:qKwAl4uglgtS5fpGI1X1O9BKgYqQKBuAhqQzhBl17AsWvDBcdP9axGQZE/:7zonT1X9qQKEA3lvP9axGQZE/

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.219:3333

Targets

    • Target

      dd45f4bab326a2d9a1eab543fd3f34584fb276c9c0f2ced514105511c293367f

    • Size

      85KB

    • MD5

      ad19353c8bc17322f767b6d74b5abd64

    • SHA1

      f5a7c9815615d208427638547bac0e186b14a829

    • SHA256

      dd45f4bab326a2d9a1eab543fd3f34584fb276c9c0f2ced514105511c293367f

    • SHA512

      63fcdf6c0fac65a993f8be2cda5d0b4fd1fe53c7939947caa259a3ee012b411175751070e51a6e532d3fe8346e6e08da5cf7f2f02de4e4355090af26363bf058

    • SSDEEP

      1536:qKwAl4uglgtS5fpGI1X1O9BKgYqQKBuAhqQzhBl17AsWvDBcdP9axGQZE/:7zonT1X9qQKEA3lvP9axGQZE/

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks