General

  • Target

    encoded.exe

  • Size

    245KB

  • Sample

    241220-y5f83stjdw

  • MD5

    0bd82c2854f9c12e335dac2c6a062620

  • SHA1

    8baa9d0cd2252470049b67adc3cf372ae8ee7453

  • SHA256

    bdca57410e7ff3dd50c3d5ff052a9d147bef19328c7d70b3ed0232696f010cd0

  • SHA512

    724d267ca9b28f805408e271564875abf79c9baac2950471c7c4d2258f1a4b0c45052321074455589db160d88ffe0f058ec0ce16e8fdecd89b254b9d96f98521

  • SSDEEP

    6144:1qGdXu6w+0Nc8Qs89Z8+LkHEgn/tt1o9P1O:9lu659b8xpn/tf8

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      encoded.exe

    • Size

      245KB

    • MD5

      0bd82c2854f9c12e335dac2c6a062620

    • SHA1

      8baa9d0cd2252470049b67adc3cf372ae8ee7453

    • SHA256

      bdca57410e7ff3dd50c3d5ff052a9d147bef19328c7d70b3ed0232696f010cd0

    • SHA512

      724d267ca9b28f805408e271564875abf79c9baac2950471c7c4d2258f1a4b0c45052321074455589db160d88ffe0f058ec0ce16e8fdecd89b254b9d96f98521

    • SSDEEP

      6144:1qGdXu6w+0Nc8Qs89Z8+LkHEgn/tt1o9P1O:9lu659b8xpn/tf8

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks