General

  • Target

    cb58950fa8568b05fd43d85eaf52fd362e07baa8cbcfd5104328bac86bbb837c

  • Size

    1.5MB

  • Sample

    241224-t68x9s1re1

  • MD5

    b4ed6d43532c069d62ce94ce193fb79d

  • SHA1

    6e9fab121110a93261df5c8866c25e97a8264432

  • SHA256

    cb58950fa8568b05fd43d85eaf52fd362e07baa8cbcfd5104328bac86bbb837c

  • SHA512

    779ed08c648a1a1dc4231b3f6fa996c7647d9ca34d13bb676a5b54e386c5a5c9aacb11ac4eeea6f0a0fa578a345ff9eabedb2efa85167fdca669c27dd978d4fb

  • SSDEEP

    24576:mVlzUcDydMYKtOGNgT0Cpp42Ue7wIysn:mV9UcOdMY0HXawI

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.60.216.83:28888

Targets

    • Target

      cb58950fa8568b05fd43d85eaf52fd362e07baa8cbcfd5104328bac86bbb837c

    • Size

      1.5MB

    • MD5

      b4ed6d43532c069d62ce94ce193fb79d

    • SHA1

      6e9fab121110a93261df5c8866c25e97a8264432

    • SHA256

      cb58950fa8568b05fd43d85eaf52fd362e07baa8cbcfd5104328bac86bbb837c

    • SHA512

      779ed08c648a1a1dc4231b3f6fa996c7647d9ca34d13bb676a5b54e386c5a5c9aacb11ac4eeea6f0a0fa578a345ff9eabedb2efa85167fdca669c27dd978d4fb

    • SSDEEP

      24576:mVlzUcDydMYKtOGNgT0Cpp42Ue7wIysn:mV9UcOdMY0HXawI

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks