General

  • Target

    bind.exe

  • Size

    72KB

  • MD5

    9d9ddd9c0d47a00f617ce548f6e18743

  • SHA1

    5e69f7a06dbc3b56652da83d95d1a9995026d1eb

  • SHA256

    d5f2d12dbfe2a61056149d99b06c61cca811dd78d04e28a87a426faae27c8fab

  • SHA512

    60e7e8c4c9ddd693b77940656709f581850a4d65eb42a397529f1ba0c8c15380ced5cb5551d3cb4e31677ee0ff1116c8f0ee0512ca2d6117778c2383e26aab98

  • SSDEEP

    1536:IzvvP7SmQAG0tgzHMqx+NuhkZtBjMb+KR0Nc8QsJq39:2j0dfsF4hkZLe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bind.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections