General

  • Target

    d9216636d829b1d11995ecb1fff22ecd08270d1dc6a305e56ec6d678827b8dcf

  • Size

    72KB

  • MD5

    0c84a7d40eec950bc711f76e75415140

  • SHA1

    9a99c51a2c1bb46896d6031e97f3b18bba4c4192

  • SHA256

    d9216636d829b1d11995ecb1fff22ecd08270d1dc6a305e56ec6d678827b8dcf

  • SHA512

    39e8bc7df5ecca3e403c5f4303f5183a9b18e39b89d7a6731e6040a37fc6fe28d7afdd313319a0d75be3efaa210f3a188bc909f2ba0078afb8891d3c3f1a6b99

  • SSDEEP

    1536:IgdCMARuJJs/zQagnILhApvKPMb+KR0Nc8QsJq39:hdCMiF/0agahAhie0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.5:33177

Signatures

Files

  • d9216636d829b1d11995ecb1fff22ecd08270d1dc6a305e56ec6d678827b8dcf
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections