General

  • Target

    02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e.exe

  • Size

    72KB

  • Sample

    241206-m8qfdazqaj

  • MD5

    a72851f5ecfc3126e44411bd482bdb33

  • SHA1

    90d3044a4409a6b1bcfef94dcb1213ecf743eabe

  • SHA256

    02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e

  • SHA512

    b932ce3631600669bbac4c96760ffe4cac03172a8a1523730b571d5d8b44783f52b6600311cd7dc0dd4a5698bdea57c12e75fd6fcdd4dbc4481e6f58134249fd

  • SSDEEP

    1536:IzFc9dgD7+oM/zGcm6/MDm3aUAOMb+KR0Nc8QsJq3V:cFcIHI/zWtXOe0Nc8QsCV

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.96:7578

Targets

    • Target

      02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e.exe

    • Size

      72KB

    • MD5

      a72851f5ecfc3126e44411bd482bdb33

    • SHA1

      90d3044a4409a6b1bcfef94dcb1213ecf743eabe

    • SHA256

      02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e

    • SHA512

      b932ce3631600669bbac4c96760ffe4cac03172a8a1523730b571d5d8b44783f52b6600311cd7dc0dd4a5698bdea57c12e75fd6fcdd4dbc4481e6f58134249fd

    • SSDEEP

      1536:IzFc9dgD7+oM/zGcm6/MDm3aUAOMb+KR0Nc8QsJq3V:cFcIHI/zWtXOe0Nc8QsCV

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks