General

  • Target

    56a710428a544b0a70d855864d81ed4ae42e89caf9162042a72c1d9caf4f8a24N.exe

  • Size

    72KB

  • Sample

    241129-zv9nba1jbr

  • MD5

    c8b1966f5d9f55b3824e456d268dfee0

  • SHA1

    eb5d504d63e528193f44754040911ceae55e8c8d

  • SHA256

    56a710428a544b0a70d855864d81ed4ae42e89caf9162042a72c1d9caf4f8a24

  • SHA512

    ce553b81b1600235088d0654b3ee5e515e65348679951b6d4c7ad655df605aaa76899e08f38a4fbb51d08b0c83f7a5a80de0ada8a7d7b03c2648f8759ae688ac

  • SSDEEP

    1536:I63TYvlVC4Y4ud9uFUBhvrzIcfvtSLTMb+KR0Nc8QsJq39:TkvrTU7wcfILTe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.1.4.6:8443/0DyGrTxfCN8NsgyzavehqguG_GoR1HVV31JHyMW2BUVMvbIk6i81Eq3jvKQ-o3vWJfnO1nBtkG2tupEuiy1FgZmMvu1vGt_cWmDxN14n6xLfhwpKddBqQOv

Targets

    • Target

      56a710428a544b0a70d855864d81ed4ae42e89caf9162042a72c1d9caf4f8a24N.exe

    • Size

      72KB

    • MD5

      c8b1966f5d9f55b3824e456d268dfee0

    • SHA1

      eb5d504d63e528193f44754040911ceae55e8c8d

    • SHA256

      56a710428a544b0a70d855864d81ed4ae42e89caf9162042a72c1d9caf4f8a24

    • SHA512

      ce553b81b1600235088d0654b3ee5e515e65348679951b6d4c7ad655df605aaa76899e08f38a4fbb51d08b0c83f7a5a80de0ada8a7d7b03c2648f8759ae688ac

    • SSDEEP

      1536:I63TYvlVC4Y4ud9uFUBhvrzIcfvtSLTMb+KR0Nc8QsJq39:TkvrTU7wcfILTe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks