General

  • Target

    6cbdb2dbbb3dde5c3914d19463ba7261ea1ed5e78230586a0ed6bfdf26eccbe9

  • Size

    1.5MB

  • Sample

    241224-t6882aslhk

  • MD5

    5b44b3102d7c75af497783199a506ffe

  • SHA1

    d6fe791214fad80011c189916c48ed0ea6855a85

  • SHA256

    6cbdb2dbbb3dde5c3914d19463ba7261ea1ed5e78230586a0ed6bfdf26eccbe9

  • SHA512

    fca0a5f9a8215b6f4bae2aba6752e37991405265f80a255cb6c97476fc56981fd8cc1e8fc2f28fb302920766b064fd80fa9b4e1dc70e4b5f360b9bc7e145628c

  • SSDEEP

    24576:AVlzUcDydMYKtOGNgT0npp42Ue7wIysn:AV9UcOdMY0HXXwI

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.60.216.83:28888

Targets

    • Target

      6cbdb2dbbb3dde5c3914d19463ba7261ea1ed5e78230586a0ed6bfdf26eccbe9

    • Size

      1.5MB

    • MD5

      5b44b3102d7c75af497783199a506ffe

    • SHA1

      d6fe791214fad80011c189916c48ed0ea6855a85

    • SHA256

      6cbdb2dbbb3dde5c3914d19463ba7261ea1ed5e78230586a0ed6bfdf26eccbe9

    • SHA512

      fca0a5f9a8215b6f4bae2aba6752e37991405265f80a255cb6c97476fc56981fd8cc1e8fc2f28fb302920766b064fd80fa9b4e1dc70e4b5f360b9bc7e145628c

    • SSDEEP

      24576:AVlzUcDydMYKtOGNgT0npp42Ue7wIysn:AV9UcOdMY0HXXwI

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks