General

  • Target

    ceef24cbca407787a388cc537772792dc915a0370a5a15edc6c8308af8e2325c

  • Size

    10KB

  • MD5

    6e9fbfb588c71b453f37f4db59cb5d6d

  • SHA1

    203810596941ee2771e00b0112438454b10c384b

  • SHA256

    ceef24cbca407787a388cc537772792dc915a0370a5a15edc6c8308af8e2325c

  • SHA512

    df00015270b62dc972557c63bb47648a2afb2c5ce100bdb6711f71d13d32eda90ea835b21844e97426cc0f826eb47e23310fa66d9caa815575244490c6b539dd

  • SSDEEP

    192:6lIMraj7M1wyWJrRNjO65ZMyQUD7E5pz6fMwGQ:6lIKC7S6JNNj9m8D7Pd

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ceef24cbca407787a388cc537772792dc915a0370a5a15edc6c8308af8e2325c
    .exe windows:6 windows x86

    8433fabe8228b8316d7b09a081598dc9


    Headers

    Imports

    Sections