General

  • Target

    a25717dc3307e0c09560d2ae855ae17c.bin

  • Size

    72KB

  • MD5

    a25717dc3307e0c09560d2ae855ae17c

  • SHA1

    5f2b210ffe4edaab8ca6101054fc647ddc1074fa

  • SHA256

    35f318291b19b47732e64a0aa5bf4f5a974de30691dc6b4416e0b13e096213f6

  • SHA512

    269f5898d902a4a8e1fa56d45ae46fdbd83b458bd5d46a4bde1aa21477a0909ce7cf7466b1caeece32d47a031b52637e9602ccaa6593341b3651d307aefd777e

  • SSDEEP

    1536:ICsnrkX331IE1GRHFLC1vMb+KR0Nc8QsJq39:ZmbHRC1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.182.240.155:31338

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a25717dc3307e0c09560d2ae855ae17c.bin
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections