General

  • Target

    58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95

  • Size

    72KB

  • Sample

    241224-2dc9wsyqax

  • MD5

    800d0d22dc87f5b7eb76574fa84e4c44

  • SHA1

    26950beeb39c62b1af9d6adc3bd0ab36052aea39

  • SHA256

    58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95

  • SHA512

    26bcd55b4b3b2b20218c38febefd2d44c5c9b390d3a5fbf90559d6b81c5dccfc9a472e8a88c452f764d238bf9d733330475aa435d6bd6090785c129c1df65cc5

  • SSDEEP

    1536:IOjmtN2LxSC4Cx5sgCzffL/uYfIHK8Mb+KR0Nc8QsJq39:AX2gCx+gCzXL/uYAHfe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.241.138:6666

Targets

    • Target

      58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95

    • Size

      72KB

    • MD5

      800d0d22dc87f5b7eb76574fa84e4c44

    • SHA1

      26950beeb39c62b1af9d6adc3bd0ab36052aea39

    • SHA256

      58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95

    • SHA512

      26bcd55b4b3b2b20218c38febefd2d44c5c9b390d3a5fbf90559d6b81c5dccfc9a472e8a88c452f764d238bf9d733330475aa435d6bd6090785c129c1df65cc5

    • SSDEEP

      1536:IOjmtN2LxSC4Cx5sgCzffL/uYfIHK8Mb+KR0Nc8QsJq39:AX2gCx+gCzXL/uYAHfe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks