General
-
Target
f2db3a6a245c58f386bd671cc1707d566e3bec948c074271357155e34cb4c6bf
-
Size
2.5MB
-
MD5
6d28599e853922b79fb2b2b2da27b4a4
-
SHA1
b996c92127b7ab992b9b6459905fb8e3f1871f5a
-
SHA256
f2db3a6a245c58f386bd671cc1707d566e3bec948c074271357155e34cb4c6bf
-
SHA512
1a1e9d8ef39564397d171f0fa1495ed20d5624dd7955247e686cfe3d7b97e7a36baef8b93ab25d6ed288da1897f0cdf945dba513ddbfdbd78ce58b71e1495659
-
SSDEEP
49152:7KYUS8c/89+mz23jlas27yuhWBo4bLBIC4RnZXdMImvNl2X1+i2WcsJ8yQZRXgRb:7Sc/89+mz23jlas27NWBXHBIC4RnZXdh
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.178.25:1111
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
f2db3a6a245c58f386bd671cc1707d566e3bec948c074271357155e34cb4c6bf
Headers
Sections
-
out.upx
Headers
Sections