General

  • Target

    9aba5fa48f3d1665716045c5db26cbe3a62ab021cdf3b6cfe2379cdfbb9517a5

  • Size

    68KB

  • MD5

    96937d44dff53222bbcf3dbcbc96c6e4

  • SHA1

    479c43385eb4a6ccb497f551ca3b6b4224af19cd

  • SHA256

    9aba5fa48f3d1665716045c5db26cbe3a62ab021cdf3b6cfe2379cdfbb9517a5

  • SHA512

    ec9b5099bf1d0e424302076f355c5b172b1b2163954776340dc90142d6bece50bbe0f61706f8a05b8391977a9586480c32dbc765d284e3d7d969a0aee2b26a25

  • SSDEEP

    1536:9vv3tEEkK9+jISXuI0/JUEbooPRrKKRjVc8UV:PEzZ3XuI0/JltZrpRpc8M

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.25.206.97:443

Signatures

Files

  • 9aba5fa48f3d1665716045c5db26cbe3a62ab021cdf3b6cfe2379cdfbb9517a5
    .exe windows x86

    419c3fe8c1eefea9336b96f74f0951dd


    Headers

    Imports

    Sections