General
-
Target
3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0
-
Size
416KB
-
MD5
1c899730d4b08554daf3c2e0a75a7f3a
-
SHA1
3bfb20580f1c6d61b12688a8df5943f315fc18dd
-
SHA256
3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0
-
SHA512
2cac01881456c9e78d3e76cabb4b18fc108a8a5a6c884692bc34c4c2806c31cfd3bcd65c7cf5e178e0ac65f40bf6f88c41ec50e0a8bff3fde7aa092273277e85
-
SSDEEP
12288:pbWm23htV4dEvM7IF7MwvFg5exc9X2qijc3rdtT:pbWm2336EvYGtg5ALqb
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
79.138.104.162:443
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
3353325c1e7793113e703dde8eb59fd95a6b3bd8b9412fd861f1415af4b3ffa0
Headers
Sections