General

  • Target

    89b28a10985c06a23a2cb3060a91e785e7eccecfb9c2f6cdd58af9b5fb40392e

  • Size

    40KB

  • MD5

    8572d9367ca91f14abb88ebfe493d8e9

  • SHA1

    6c30792d21c044c8aed68c555332af1fb32dd58f

  • SHA256

    89b28a10985c06a23a2cb3060a91e785e7eccecfb9c2f6cdd58af9b5fb40392e

  • SHA512

    a1c6eb2dbef272c98d6a346ebc8d3a656261fe2deaf29cde80a20582c7384032f39a59d08e06fdab5693c2002e444bbcc6e42aa7e6911417c4a0a1d6e06ebe5b

  • SSDEEP

    768:0F62kEs+ufHR5IsDLSc+CpsrpOtjRLRkftLRkfT:9EaVZYpuuftufT

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

121.166.146.187:80

Signatures

Files

  • 89b28a10985c06a23a2cb3060a91e785e7eccecfb9c2f6cdd58af9b5fb40392e
    .exe windows x86

    ec0fd12ddc31ab199fd4cc6c243cf6d0


    Headers

    Imports

    Sections