General

  • Target

    f0a4d54bc278c020501357a199f70937e0b55f28d1bc6de011584a67ef806dbd

  • Size

    2.5MB

  • Sample

    241207-yemm6szndz

  • MD5

    ef80fc93975e76891198ab104d4e2728

  • SHA1

    821be0463fd703cb80a5c34a95089689c8dba7c8

  • SHA256

    f0a4d54bc278c020501357a199f70937e0b55f28d1bc6de011584a67ef806dbd

  • SHA512

    d451c19d89523200233b0931f341156f3a6412b6ce136af70af85c202450aa14a26108bf914a9a91f8b5b28c9a54e438b4be2203a57165ae41b188d069cdd688

  • SSDEEP

    49152:Lb6Eir9RQeKV1oWCt0d2RyD3iJKubsISTb/am5B8y6sEUhSSwhUPMub:ynLLzWCud2JnbsIW/amj8yF8Sp

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      f0a4d54bc278c020501357a199f70937e0b55f28d1bc6de011584a67ef806dbd

    • Size

      2.5MB

    • MD5

      ef80fc93975e76891198ab104d4e2728

    • SHA1

      821be0463fd703cb80a5c34a95089689c8dba7c8

    • SHA256

      f0a4d54bc278c020501357a199f70937e0b55f28d1bc6de011584a67ef806dbd

    • SHA512

      d451c19d89523200233b0931f341156f3a6412b6ce136af70af85c202450aa14a26108bf914a9a91f8b5b28c9a54e438b4be2203a57165ae41b188d069cdd688

    • SSDEEP

      49152:Lb6Eir9RQeKV1oWCt0d2RyD3iJKubsISTb/am5B8y6sEUhSSwhUPMub:ynLLzWCud2JnbsIW/amj8yF8Sp

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks