General

  • Target

    e2d0362849e80510ceeea7da30ca253845a239a256f3fb5b6c6421c3571c390c.exe

  • Size

    189KB

  • Sample

    241226-s4kxzsyrcj

  • MD5

    db4d252ec2d4013801984899894b5306

  • SHA1

    37813c46dbba4c5d2ae48e505bd5d6a7ead1e8f4

  • SHA256

    e2d0362849e80510ceeea7da30ca253845a239a256f3fb5b6c6421c3571c390c

  • SHA512

    c04668df0759baa1d5ce76e9d3c4a3ce8e8d75b860d5524dd756a35a2bfdfa5221c5a38c22f72c8c8fd52656c7fbb04dbaf160a40fdc836a169ff95144524878

  • SSDEEP

    3072:AV12yaqWRMg6XRB7k3nAietmIrHO0w36/CNor0KeQun086dAHXhaafMzDu:AXNavyTXb7qetmOu0w4M2peQun086QXZ

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.25.35.45:3355

Targets

    • Target

      e2d0362849e80510ceeea7da30ca253845a239a256f3fb5b6c6421c3571c390c.exe

    • Size

      189KB

    • MD5

      db4d252ec2d4013801984899894b5306

    • SHA1

      37813c46dbba4c5d2ae48e505bd5d6a7ead1e8f4

    • SHA256

      e2d0362849e80510ceeea7da30ca253845a239a256f3fb5b6c6421c3571c390c

    • SHA512

      c04668df0759baa1d5ce76e9d3c4a3ce8e8d75b860d5524dd756a35a2bfdfa5221c5a38c22f72c8c8fd52656c7fbb04dbaf160a40fdc836a169ff95144524878

    • SSDEEP

      3072:AV12yaqWRMg6XRB7k3nAietmIrHO0w36/CNor0KeQun086dAHXhaafMzDu:AXNavyTXb7qetmOu0w4M2peQun086QXZ

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks