General

  • Target

    f0a9eb4eabe01554caa58809dbeac1a0549f1af5386e26bed1781b7489d9a796

  • Size

    72KB

  • MD5

    808b13ae33d30cf872ccc00f93bae573

  • SHA1

    229f1fd38d01dcf4fe7ef552dab8c8773e260251

  • SHA256

    f0a9eb4eabe01554caa58809dbeac1a0549f1af5386e26bed1781b7489d9a796

  • SHA512

    61532e6e4389f230dda3d2c0f302f67d3fd4e3e3de4eea5ddd5140b8b56d4e77ac3a927fe01f3ea7e038c10edc8660080a1a5c5aa3048af3c358f436c1b86674

  • SSDEEP

    1536:I5G7KzQcgkCL71Z9U1wJQagADi4lbTMb+KR0Nc8QsJq39:ggpxFQOKAnlbTe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.23:4444

Signatures

Files

  • f0a9eb4eabe01554caa58809dbeac1a0549f1af5386e26bed1781b7489d9a796
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections