General

  • Target

    d3a051c8fb8ae35e052add3e118fe2e3fd914e68e12a90d6633d64917f102562

  • Size

    72KB

  • MD5

    7840eb3d2e5506d84cd8aff67561e4d9

  • SHA1

    9c63610712af9eefdd5fbe36d9d8cad9975686e8

  • SHA256

    d3a051c8fb8ae35e052add3e118fe2e3fd914e68e12a90d6633d64917f102562

  • SHA512

    c253b6d9a8a2e71c743284f8f55c1bff5ec45ccff9e917da8c76f3f3f369fa6125c3960331c2737dacfa3b06872577b9020c6748063d5decff45411673448993

  • SSDEEP

    1536:ITl8PEpVdFZ/f0CV/A713A4XHyDII4Mb+KR0Nc8QsJq39:+FpVdn/ffoPHyDIHe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.42:4444

Signatures

Files

  • d3a051c8fb8ae35e052add3e118fe2e3fd914e68e12a90d6633d64917f102562
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections