General

  • Target

    9317756003f999b304dc5e18b39395fd565da6e7a93c7816fa775ff822c6a25f

  • Size

    3.2MB

  • Sample

    250218-kycenayran

  • MD5

    6c384ccee462a38218d10246bbf080c6

  • SHA1

    3da36f92fd84dec584782ae830a11fd92f17fce4

  • SHA256

    9317756003f999b304dc5e18b39395fd565da6e7a93c7816fa775ff822c6a25f

  • SHA512

    ee258dc82b44de5e98b9d8f5d7e9322d975b36ab0e625ef889736e91569059cfacb829ea33117a0dbf8d2ae78516b21c5d01cd85bc9ebb16e4e9e568608a385b

  • SSDEEP

    49152:4R6T2tENWqhw+pSYryLTQ4ullYF5svlRlZPAoTMZmhJv3eEkF/L:fOAwvAImAoTMgJvuL

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.75.128:1234

Targets

    • Target

      9317756003f999b304dc5e18b39395fd565da6e7a93c7816fa775ff822c6a25f

    • Size

      3.2MB

    • MD5

      6c384ccee462a38218d10246bbf080c6

    • SHA1

      3da36f92fd84dec584782ae830a11fd92f17fce4

    • SHA256

      9317756003f999b304dc5e18b39395fd565da6e7a93c7816fa775ff822c6a25f

    • SHA512

      ee258dc82b44de5e98b9d8f5d7e9322d975b36ab0e625ef889736e91569059cfacb829ea33117a0dbf8d2ae78516b21c5d01cd85bc9ebb16e4e9e568608a385b

    • SSDEEP

      49152:4R6T2tENWqhw+pSYryLTQ4ullYF5svlRlZPAoTMZmhJv3eEkF/L:fOAwvAImAoTMgJvuL

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks