Resubmissions

12/06/2023, 09:12

230612-k6pd7abg6s 10

13/05/2023, 22:47

230513-2qjx7sbh71 10

General

  • Target

    autorun1.exe

  • Size

    282KB

  • MD5

    f22201dacbb5c97490ec5cd896332417

  • SHA1

    c18eee772e627430f93232ce910379d762b9c33e

  • SHA256

    b97dfb6566b00ec157b40de43f6fd709f8ba78cfc96762faa1ef3eb5286d7b6d

  • SHA512

    67f43bc34dcf4a60c6556655d5d744d143fe61f4702cfd446a0748fd8fa69300a4fa48b4fe4920413295af39696f0aef7a4a5adf7bc65cd31480a7936d73b1ea

  • SSDEEP

    6144:0fqq8G/1MW0WqEPmz3zW+6PacR2ybieWqwCTVtC:0Ffq4HuLypCRX1WTvC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

184.94.215.217:5530

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • autorun1.exe
    .exe windows x86

    e27fc01befa0598fb4ae5b69afcdf101


    Headers

    Imports

    Sections