General

  • Target

    831474acabc98899d7325adebd4721030272c72cb7b5b30e40aaba2b84542d6d

  • Size

    1.5MB

  • Sample

    241224-t68x9s1rft

  • MD5

    897f61a23b42beb1d9f015fbe5d310d9

  • SHA1

    7e7f7e5be7b9d5966aacc403420cd69d91596cc7

  • SHA256

    831474acabc98899d7325adebd4721030272c72cb7b5b30e40aaba2b84542d6d

  • SHA512

    a4764a3fd8062a29523c2c0422832980ff2ba71a44fedf6b7455e41f681350019e5bc70349aa27a4112b87526340f767ab6c53e96e856dc360bb6cfb210a03ec

  • SSDEEP

    24576:bp1DWpt5a6dyAxma7TMwpp42Ue7wIysn:bpRWpva6dhYXEwI

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.60.216.83:28888

Targets

    • Target

      831474acabc98899d7325adebd4721030272c72cb7b5b30e40aaba2b84542d6d

    • Size

      1.5MB

    • MD5

      897f61a23b42beb1d9f015fbe5d310d9

    • SHA1

      7e7f7e5be7b9d5966aacc403420cd69d91596cc7

    • SHA256

      831474acabc98899d7325adebd4721030272c72cb7b5b30e40aaba2b84542d6d

    • SHA512

      a4764a3fd8062a29523c2c0422832980ff2ba71a44fedf6b7455e41f681350019e5bc70349aa27a4112b87526340f767ab6c53e96e856dc360bb6cfb210a03ec

    • SSDEEP

      24576:bp1DWpt5a6dyAxma7TMwpp42Ue7wIysn:bpRWpva6dhYXEwI

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks