General

  • Target

    ffa1f1b2db1bf4546cd352af823347d4a4220558a0b06c99c8dfc479037a3921N.exe

  • Size

    9KB

  • Sample

    241207-ng6tqa1jay

  • MD5

    3e2a6653e95dcaa8c0e9cc3c40fe71e0

  • SHA1

    763c581aa14a76ce32a6235334eec0560d0bddc4

  • SHA256

    ffa1f1b2db1bf4546cd352af823347d4a4220558a0b06c99c8dfc479037a3921

  • SHA512

    b513e13671117cd4f801350fd2be18b5b7356f36acc29ebb63205d0ef4cd324dd472c1d783b220168a069b0f824042502045bd7e5b4762bbb437914f1e4ba267

  • SSDEEP

    48:q0kV3zU9G4aNVh7XphlhEF57/nddg74Cnkz4bOE:vDIKALn

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/exec

Targets

    • Target

      ffa1f1b2db1bf4546cd352af823347d4a4220558a0b06c99c8dfc479037a3921N.exe

    • Size

      9KB

    • MD5

      3e2a6653e95dcaa8c0e9cc3c40fe71e0

    • SHA1

      763c581aa14a76ce32a6235334eec0560d0bddc4

    • SHA256

      ffa1f1b2db1bf4546cd352af823347d4a4220558a0b06c99c8dfc479037a3921

    • SHA512

      b513e13671117cd4f801350fd2be18b5b7356f36acc29ebb63205d0ef4cd324dd472c1d783b220168a069b0f824042502045bd7e5b4762bbb437914f1e4ba267

    • SSDEEP

      48:q0kV3zU9G4aNVh7XphlhEF57/nddg74Cnkz4bOE:vDIKALn

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks