General

  • Target

    1.exe

  • Size

    245KB

  • Sample

    250103-m6rwessqcq

  • MD5

    fe1297a73d0ffcb6ae4376e06f248093

  • SHA1

    5c7c56a17304846181bca7fd49b7e154a28677a8

  • SHA256

    5117533dc45c5ef9d651764ed3984ec486cf4fecb18f61d45eace1833559849a

  • SHA512

    6e6ccca77d78374d90054ecc66b2e65cd7652e2ccb9371034726005e67918746df91d5f696df6398a3d7fe469cedafee257fcd2f50d6e688366760f53653273e

  • SSDEEP

    6144:hqGdXu6wH0Nc8QsqrYZizEGu0Nyx6WKjLSsiuc7WujnD3o:hlu6kBrKy5/NQnMLSsiF7Wuzbo

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      1.exe

    • Size

      245KB

    • MD5

      fe1297a73d0ffcb6ae4376e06f248093

    • SHA1

      5c7c56a17304846181bca7fd49b7e154a28677a8

    • SHA256

      5117533dc45c5ef9d651764ed3984ec486cf4fecb18f61d45eace1833559849a

    • SHA512

      6e6ccca77d78374d90054ecc66b2e65cd7652e2ccb9371034726005e67918746df91d5f696df6398a3d7fe469cedafee257fcd2f50d6e688366760f53653273e

    • SSDEEP

      6144:hqGdXu6wH0Nc8QsqrYZizEGu0Nyx6WKjLSsiuc7WujnD3o:hlu6kBrKy5/NQnMLSsiF7Wuzbo

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks