General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    9af04db1d9dbb8c5df1ab0065b1ba9fe

  • SHA1

    167c0feca6268d90dbbec3a45dc58c82abf1da42

  • SHA256

    7879dfbc202e13776de4cc01a9ae5df566e41cdf2151c0e79ca33fea0b0e09dc

  • SHA512

    214854a9140cd2f18906139e171d95efb92104cd611ba4b7c2af02dc18684ef88b2d75e7b9f4b5906cc0422c9d8e3345592aed31fb6dfa1d02ea7738cc584383

  • SSDEEP

    1536:IGzpJSJqpPVc7wPA8SxXJqzjb7sy5OzMb+KR0Nc8QsJq39:/dJSJqRVc7b8SxXJqzj0+Ee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

20.125.139.231:1335

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections