General

  • Target

    d780aebac2534cec55c3b71d3b7f2412bfcc1990531cd71d6b7b8cd528f50abb_JC.exe

  • Size

    39KB

  • MD5

    9f7656ddb94fb3799dcbebdf6daee37b

  • SHA1

    9b96592ee652b1fac84f2872bf16bf1eb5bc51aa

  • SHA256

    d780aebac2534cec55c3b71d3b7f2412bfcc1990531cd71d6b7b8cd528f50abb

  • SHA512

    852484c000b06e5fc2b40c3534dc5690ec3c26cc0dae555d99373622c75e6b6f907478351a0605b8837ce6facafe63223136926c205b45433454673fdd1d0d69

  • SSDEEP

    768:0qJn5EdPbqhXRZR9xEAkhiZq+b+pByD3:0qd6PbeXR39x6hiZq+b+p

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.154:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d780aebac2534cec55c3b71d3b7f2412bfcc1990531cd71d6b7b8cd528f50abb_JC.exe
    .exe windows:6 windows x86

    b276147a484e123495c534ff16aaf771


    Headers

    Imports

    Sections