General

  • Target

    86e744903f36f794f065e47f9149d302872bae7457548dc17f28c381eb286905

  • Size

    2.3MB

  • Sample

    250103-rz33bssjhp

  • MD5

    c2a1eb6aae267f50d452db8e3836f05f

  • SHA1

    ab4b076efd56d93c400d42bbcd31d29fa8aabcc4

  • SHA256

    86e744903f36f794f065e47f9149d302872bae7457548dc17f28c381eb286905

  • SHA512

    3e789a64db7214f14b9be2d61a2dfe1175b51e743cf1c3b6b6217bf50c204b337d8eb5de6501b00bd8848999e12370bc826fa22f5382418f67e001681b3a8c73

  • SSDEEP

    12288:ddTEzfxUVkStWgS/pdPcrGuXQ1hv+ID821kgqrSory3Q0sJMg5j69KW2jddN8t23:LTwfxUVkStooVrxryI969KWkddN8tI

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.8.8.250:443

Targets

    • Target

      86e744903f36f794f065e47f9149d302872bae7457548dc17f28c381eb286905

    • Size

      2.3MB

    • MD5

      c2a1eb6aae267f50d452db8e3836f05f

    • SHA1

      ab4b076efd56d93c400d42bbcd31d29fa8aabcc4

    • SHA256

      86e744903f36f794f065e47f9149d302872bae7457548dc17f28c381eb286905

    • SHA512

      3e789a64db7214f14b9be2d61a2dfe1175b51e743cf1c3b6b6217bf50c204b337d8eb5de6501b00bd8848999e12370bc826fa22f5382418f67e001681b3a8c73

    • SSDEEP

      12288:ddTEzfxUVkStWgS/pdPcrGuXQ1hv+ID821kgqrSory3Q0sJMg5j69KW2jddN8t23:LTwfxUVkStooVrxryI969KWkddN8tI

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks