General

  • Target

    0e3925d8d05c62f5af5df245ef06825fcca3809a8f5dfffaceaa5bbc7762e859N.exe

  • Size

    14KB

  • Sample

    241203-27rdlsvmdq

  • MD5

    b8152ccdc68856d3efb1e2c805ce9fb0

  • SHA1

    348a59d24c52f5f53586341dd8646c3fa1c97ea8

  • SHA256

    0e3925d8d05c62f5af5df245ef06825fcca3809a8f5dfffaceaa5bbc7762e859

  • SHA512

    ef85302a0fe916abfa1055c2dac0c134f53b8de92d3482ad9a7639edc70751b39358e4a0a757e73473aaa925c055e88070bc9f0638948802ed7e93eb87a8e6c0

  • SSDEEP

    192:Urmb4+kKb18RebYNeUtwCINEmMUThL/YJ6EEn9sTZAAZCMl:Ur6usyebVUtwfMOjYscAXS

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.10.135:4444

Targets

    • Target

      0e3925d8d05c62f5af5df245ef06825fcca3809a8f5dfffaceaa5bbc7762e859N.exe

    • Size

      14KB

    • MD5

      b8152ccdc68856d3efb1e2c805ce9fb0

    • SHA1

      348a59d24c52f5f53586341dd8646c3fa1c97ea8

    • SHA256

      0e3925d8d05c62f5af5df245ef06825fcca3809a8f5dfffaceaa5bbc7762e859

    • SHA512

      ef85302a0fe916abfa1055c2dac0c134f53b8de92d3482ad9a7639edc70751b39358e4a0a757e73473aaa925c055e88070bc9f0638948802ed7e93eb87a8e6c0

    • SSDEEP

      192:Urmb4+kKb18RebYNeUtwCINEmMUThL/YJ6EEn9sTZAAZCMl:Ur6usyebVUtwfMOjYscAXS

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks