General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    70c92ec2f36a276f9ee00eb44486e6a0

  • SHA1

    a0f08a05018444a4a8b6c0bda2c397879a1416c4

  • SHA256

    838e1101d4abbe2461931e1e778d0f90f4e3a63add6a03e0d2367a28fa931aa4

  • SHA512

    26309fdd2dbd5555cdb2e737f3ecf1a4fbf78908c685415dc975b6f916ce831a9b397a66c20b4e1671f58c2868130ab9769e77911a1995e23aac01ee3cc038cc

  • SSDEEP

    1536:IzkFxws0vZ6M4tAYUdKbbGre6l/S9vqAZMb+KR0Nc8QsJq3:uIxgZV4tAVdKm112Ze0Nc8QsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.104:4444

Signatures

Files

  • payload.exe
    .exe .ps1 windows:4 windows x86