General

  • Target

    xmpp.exe

  • Size

    3.9MB

  • MD5

    9a8debc5860fbbdbf18f89da9bf7b085

  • SHA1

    6369ff14f2374b1acad3187cde19349fcdff4d53

  • SHA256

    59efd28659f226c807a110d950dd53694bddbed2be6af2ea7e7977eff2871320

  • SHA512

    a20a173f20844c97ab25fc48601092ea58046ec2ff166821ea7ab9e83cdbb3113dd64a198dfebd3deb367d40eeb3a7569535af85053c0799b0bd61244e654a8c

  • SSDEEP

    49152:cyzKWtMzxfan/FkSvzCrcGJJpx7HW2HBK9p98e90pHBK9:cy2cMzdmtChDp

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xmpp.exe
    .exe windows x86

    af36070a160f5d8eff7f2aa47fb76bab


    Headers

    Imports

    Exports

    Sections