General
-
Target
5a375f5966635659faa257ecf8a0597e467c286559522c57642c25fa62725dae
-
Size
6.3MB
-
MD5
48ec2fd8669fa01f2ffff4b290acaff5
-
SHA1
182a9590be305a9dfbc347f76eb44d72483c7b65
-
SHA256
5a375f5966635659faa257ecf8a0597e467c286559522c57642c25fa62725dae
-
SHA512
e336feed3f7c5217c8361d43f346d67fdeb220420c5e26a5800282a08504e2c27b049d550634c2ba56fdf9a03b02a029a5c44329884d437089e862ec4b3efed1
-
SSDEEP
196608:zpxwLK+szr3s6kwhDE/veXvIxlt4ehqi2wZRdyIg7VaoTKbW:7wLeb3DE/vGvIztCwZHwTz
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.0.106:4444
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
5a375f5966635659faa257ecf8a0597e467c286559522c57642c25fa62725dae
Headers
Sections
-
out.upx
Headers
Sections