General

  • Target

    2B45716B2A7E72F348218E55950C4A43.exe

  • Size

    72KB

  • MD5

    2b45716b2a7e72f348218e55950c4a43

  • SHA1

    018d6cca904bbe57b802b253346f66ebe5d4b396

  • SHA256

    df001e44bad37b685b8c41e2848f5baa2d224d1aead9075753650bdd67185c04

  • SHA512

    ad1a10600032a4a0425e79c096cc69b29a548f2b08a0c43d1f21a587389063d9cf7e1765f45c4419a84ef6309c10f217ae611a4cffb8fadbeb2141895a710520

  • SSDEEP

    1536:IwGcJ+5moUvrPmJNFLJgevvl9nrh4V4VEbWieMb+KR0Nc8QsJq39:lhJGmo4PInX3nSkE6iee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.160.115.27:11661

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2B45716B2A7E72F348218E55950C4A43.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections