General

  • Target

    85be7f5265f5bfbf49c9e22dc88a358e8beb5d4482aa64681352de6078054fc1

  • Size

    72KB

  • MD5

    63ba5ef2b44eb099f1d8c5aad131c7d0

  • SHA1

    bfbe4e6441c368b3abaf708100aae07e7418b3fc

  • SHA256

    85be7f5265f5bfbf49c9e22dc88a358e8beb5d4482aa64681352de6078054fc1

  • SHA512

    7511891672610a7c485287335542366ee0f683a8595dd5a828c4e59d1bc44ae30cd29c92a5edb6e45ed09290ab549abe142df168efc5472dda08225e136a7035

  • SSDEEP

    1536:IpLo3k0iZmIgoDIs68bonBXMb+KR0Nc8QsJq39:oSkxMIvonBXe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.101:4444

Signatures

Files

  • 85be7f5265f5bfbf49c9e22dc88a358e8beb5d4482aa64681352de6078054fc1
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections