General

  • Target

    9666a764f7fe3d157865dc89564612c811d510e9e28466ea29104f1c75c9ce12

  • Size

    1.5MB

  • Sample

    241224-t6882aslhj

  • MD5

    a51d0e3309a75bb3cb964a314ff4fad7

  • SHA1

    88783e0276f8aaf86061da741bc65436b9683a48

  • SHA256

    9666a764f7fe3d157865dc89564612c811d510e9e28466ea29104f1c75c9ce12

  • SHA512

    3aee709e570862a4c00777b224da39db1dcd30fcc6cea50590dfb762c112466cc2b1b1cf29ba26c461ead5bcd2428fce32b8b7734d23d7f5f76aaf5ce9fee015

  • SSDEEP

    24576:NgRz38waf0TSNmGVwTsqpp42Ue7wIysn:NgJ38bf0TMfXCwI

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.60.216.83:28888

Targets

    • Target

      9666a764f7fe3d157865dc89564612c811d510e9e28466ea29104f1c75c9ce12

    • Size

      1.5MB

    • MD5

      a51d0e3309a75bb3cb964a314ff4fad7

    • SHA1

      88783e0276f8aaf86061da741bc65436b9683a48

    • SHA256

      9666a764f7fe3d157865dc89564612c811d510e9e28466ea29104f1c75c9ce12

    • SHA512

      3aee709e570862a4c00777b224da39db1dcd30fcc6cea50590dfb762c112466cc2b1b1cf29ba26c461ead5bcd2428fce32b8b7734d23d7f5f76aaf5ce9fee015

    • SSDEEP

      24576:NgRz38waf0TSNmGVwTsqpp42Ue7wIysn:NgJ38bf0TMfXCwI

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks