Overview

overview

10

Static

static

10

x1shi5.exe

windows7-x64

10

x1shi5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    x1shi5.exe.bin

  • Size

    72KB

  • MD5

    5271390c7018094b33a8eb9397668bde

  • SHA1

    e6dbb023483a13577492961519608fb0f2d46bf3

  • SHA256

    ae15df8a2206b89b512d9721f2687e20b16cee0b617ac6c8e513acd9e1c98e9b

  • SHA512

    d5d3cec80a874ef719e874ead6db6f99981769cc098247992de2fde4c5cdb81512ab9a3f3a5ac9eaf182611de739c23733cc78ce12262036a321dd8f8319a4df

  • SSDEEP

    1536:I8eM+fPuNocuNqMptkhoFJC3GtMb+KR0Nc8QsJq39:uLfPummM7ckC3Gte0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.233.146:1122

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x1shi5.exe.bin
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections