General

  • Target

    57b8a21157e72e129c8c4f6b45b8b6c2adc6465ae31f62ffeda162533befd58fN.exe

  • Size

    282KB

  • Sample

    241202-rcb1bsslbq

  • MD5

    d7083acbe467c90d22f776686e515fc0

  • SHA1

    9ad373fd2f787efa9ab0f69bd906ab75eb9ce825

  • SHA256

    57b8a21157e72e129c8c4f6b45b8b6c2adc6465ae31f62ffeda162533befd58f

  • SHA512

    d2a946ce35c5993d445a34ba5b4d50c629911d4014cef750906cda10a3189d2a4c5ea6a2ea2568186717c59356f12a9e59cc90ec4a7b8f73a998399a4e84393d

  • SSDEEP

    6144:hgfABnR8YfEL01SHhRG/NqHtogoSok+AWGChCUVAwo:hFD9oCstdoS2tGChxAwo

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

105.103.6.61:444

Targets

    • Target

      57b8a21157e72e129c8c4f6b45b8b6c2adc6465ae31f62ffeda162533befd58fN.exe

    • Size

      282KB

    • MD5

      d7083acbe467c90d22f776686e515fc0

    • SHA1

      9ad373fd2f787efa9ab0f69bd906ab75eb9ce825

    • SHA256

      57b8a21157e72e129c8c4f6b45b8b6c2adc6465ae31f62ffeda162533befd58f

    • SHA512

      d2a946ce35c5993d445a34ba5b4d50c629911d4014cef750906cda10a3189d2a4c5ea6a2ea2568186717c59356f12a9e59cc90ec4a7b8f73a998399a4e84393d

    • SSDEEP

      6144:hgfABnR8YfEL01SHhRG/NqHtogoSok+AWGChCUVAwo:hFD9oCstdoS2tGChxAwo

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks