General

  • Target

    b593407b9b0111b9a3194d7a3f790b67fef12340228fec65a41ee5d25beb24ac

  • Size

    60KB

  • MD5

    0f6cafee53e42fb6813437c4d3958c16

  • SHA1

    7e4bd906e45d9742d5007bbd86123c72ed0bf7c3

  • SHA256

    b593407b9b0111b9a3194d7a3f790b67fef12340228fec65a41ee5d25beb24ac

  • SHA512

    17dbe9a02157e366819e1b98faaddfc3eef5c3d0c97ebbaddac4d231e2525269ea7373191e94631718b52d16ff92a604c7d99ea7084024a3e8e0371a8ac52246

  • SSDEEP

    384:F0heTfXZcyh2ePilp7P5IdB1Rglr7GHYHk0JSiEUJhQQfBX4XZRMgLuP89Z57:W0pcyulgd6yepAiEwhBBITM+uP89

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.52.129:4567

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b593407b9b0111b9a3194d7a3f790b67fef12340228fec65a41ee5d25beb24ac
    .exe windows:6 windows x64

    c3035865609dd4a257db5ba76e3aa1a4


    Headers

    Imports

    Sections