General

  • Target
    8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
  • Size 48KB
  • Sample260720-rnx2yacy3q
  • SHA256 8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • metasploit

Version
  • encoder/shikata_ga_nai

Extracted

Family
  • metasploit

Version
  • windows/reverse_http

C2
  • http://192.168.66.2:4444/KGQDBe7xhn7iu-O6iOX-9Asu-1pFVURvc1nJxnbZcEjG3vKk2zupeVZ3M88XUWHcc5jgs-COFDvJum2GW7ARxM3WNhhiBIgUe8DsCIhZj4I58v14HEDwqlg3IcPggtNGTJB-YlfNR9VsVL6ffCXp--hDMABXmFut6eidJcPWDeRwh4VdqVKPHQl_YZY2091xgFSEpfSnVj_FLWRTNUnTtPuL8H19thYrVYUjOA1EPESvsg8z

Targets

    • Target
      8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
    • Size 48KB
    • SHA256 8b678635eb3e906c5e93a099a89dd8515b37004f98e41db170e718ee29596db4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v16

Tasks