Resubmissions

12/06/2023, 09:11

230612-k5v6cabb68 10

13/05/2023, 14:44

230513-r35qbsag6x 10

General

  • Target

    shell.exe

  • Size

    72KB

  • MD5

    d0cbeb92ee0561a3f6b63f3cfe75ed85

  • SHA1

    e3f78ae90451ab2828270d58aab60f1a6cf834fc

  • SHA256

    aaf8fa2e213f75d8000399f8f4ec58f6dbeacf0c7b0658c1d25f6f1832376414

  • SHA512

    49c3dc769d0ae91809af18c34301965c195739028d6a43ba0a2b225c2c16f0fc185debc7f94aebc88a6d0ad017b5c542e725537591d3632036cbe558f64a090b

  • SSDEEP

    1536:ISvRQMq8PdzJjDXsImzw5vZAMb+KR0Nc8QsJq39:NaMq4dhA7zuZAe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

198.13.56.131:3789

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections