General

  • Target

    0f8af674fd0bd92225b457cd31f980af73ed9efb7d90b561a1a338eb734ae6ca

  • Size

    67KB

  • Sample

    241117-g3vv1ssnd1

  • MD5

    de1368d2b8246836d10227917832d9ef

  • SHA1

    adae12fb75ed8680c00e4d7783fec5cd83877565

  • SHA256

    0f8af674fd0bd92225b457cd31f980af73ed9efb7d90b561a1a338eb734ae6ca

  • SHA512

    b535ede95804a0218b96a12cd6c78be4ecc1107866e8b55300c137f7b75d0c564dc8508e38a83b40f96b84974dfc49662976479afd8f52a29a93b99c556efa4e

  • SSDEEP

    768:x/7ZhiNSONUMq6QgAboGkyV0SLZ8MIaSsZDMHc3ivkTNeEF/3kCFxh9HV/2eHYyU:x/jirQswtHPSCKMivk5eEmCFeh5V

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.8:2345

Targets

    • Target

      0f8af674fd0bd92225b457cd31f980af73ed9efb7d90b561a1a338eb734ae6ca

    • Size

      67KB

    • MD5

      de1368d2b8246836d10227917832d9ef

    • SHA1

      adae12fb75ed8680c00e4d7783fec5cd83877565

    • SHA256

      0f8af674fd0bd92225b457cd31f980af73ed9efb7d90b561a1a338eb734ae6ca

    • SHA512

      b535ede95804a0218b96a12cd6c78be4ecc1107866e8b55300c137f7b75d0c564dc8508e38a83b40f96b84974dfc49662976479afd8f52a29a93b99c556efa4e

    • SSDEEP

      768:x/7ZhiNSONUMq6QgAboGkyV0SLZ8MIaSsZDMHc3ivkTNeEF/3kCFxh9HV/2eHYyU:x/jirQswtHPSCKMivk5eEmCFeh5V

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks