General

  • Target

    a3a1f1425044617e5f95473c48837be18c79c157f70a943cfb89a2ac8b5c0476

  • Size

    1.3MB

  • MD5

    8858ac75539db95540318f9d6d162ebb

  • SHA1

    81857d07491812897891460303017b07e46b5f59

  • SHA256

    a3a1f1425044617e5f95473c48837be18c79c157f70a943cfb89a2ac8b5c0476

  • SHA512

    7934d8c18a5d18d2524e444d73cc180780b2cabed124f3094a833246414926a88362814dea65cd68910667b9f2d756a233d1b2d35edfa88fe9d33591e52174e5

  • SSDEEP

    24576:ddgk3tiznJ1NXBcJryPV9hImx3z5B8osKtQKdiFQOTV2CvKln6I2:dp3tibNXBcQyyDVsKtrdoT7ylnt2

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.168.105:4444

Signatures

Files

  • a3a1f1425044617e5f95473c48837be18c79c157f70a943cfb89a2ac8b5c0476
    .exe windows:5 windows x86

    d6d33cfa83489bf5ba9c5b52261af2b7


    Code Sign

    Headers

    Imports

    Sections