General

  • Target

    c503d7540402dd6c772fe32c433a009bfb9d7b12ad34dc395ad76af3bb5369d6

  • Size

    37KB

  • MD5

    a59af813947ddf78200ea5f5f6b728e5

  • SHA1

    21e2e00be56c5c2667b5a71ed59b9c18cf14edd2

  • SHA256

    c503d7540402dd6c772fe32c433a009bfb9d7b12ad34dc395ad76af3bb5369d6

  • SHA512

    a2841459531fc7dbde9de6186e84dddb39fa3e3fe2ecd2428bab4fd5ed4b3ed87220b498739e70455c2f7ee630f6cbfb209384a2e43c7239e35611f241b621d4

  • SSDEEP

    768:mVAsSMLj2rgCUIkhMOvA5Wq4nINTiSKsQ6lRZ95x:Q+st5YEzn6Titkh5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

41.110.231.91:8080

Signatures

Files

  • c503d7540402dd6c772fe32c433a009bfb9d7b12ad34dc395ad76af3bb5369d6
    .exe windows x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections