General

  • Target

    08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86aN.exe

  • Size

    189KB

  • Sample

    241225-smm11swphj

  • MD5

    63f5ec96b6ed62519a94fb7ef9ae63c0

  • SHA1

    e550d810b775cf7942247051f2c7e6d257727295

  • SHA256

    08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86a

  • SHA512

    355374750a0a53322c5385a835b40c3ab51ef5b60054c8ac639e7857e3014cb86cbf9eda2dcfc1b080a4e55a42673b9e523c87ab36635176f466f454c73058f6

  • SSDEEP

    3072:AV12yaqWRMg6XRB7k3nAietmIrHO0w36/CNor0KeQun086dAHXhaafMzD:AXNavyTXb7qetmOu0w4M2peQun086QXS

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.25.35.45:3355

Targets

    • Target

      08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86aN.exe

    • Size

      189KB

    • MD5

      63f5ec96b6ed62519a94fb7ef9ae63c0

    • SHA1

      e550d810b775cf7942247051f2c7e6d257727295

    • SHA256

      08ffafa17eb22ef7cc5c0d53bca3e635c2db18a0f1e0dde139930702a093c86a

    • SHA512

      355374750a0a53322c5385a835b40c3ab51ef5b60054c8ac639e7857e3014cb86cbf9eda2dcfc1b080a4e55a42673b9e523c87ab36635176f466f454c73058f6

    • SSDEEP

      3072:AV12yaqWRMg6XRB7k3nAietmIrHO0w36/CNor0KeQun086dAHXhaafMzD:AXNavyTXb7qetmOu0w4M2peQun086QXS

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.