General

  • Target

    8688d3d3f5901c6c3fd85ae102e53d7303ccee51552cc6fd3a0f0f3c3ce30da1

  • Size

    9KB

  • MD5

    495ad733a0f78d80d48a6257af4a660d

  • SHA1

    601e31856a36b92ea10fd16101d1455b459d16f5

  • SHA256

    8688d3d3f5901c6c3fd85ae102e53d7303ccee51552cc6fd3a0f0f3c3ce30da1

  • SHA512

    7f7953e148d5a4488ac14b535fc5e64f325e64ce233596d2b9a9fa506feeb70a2c536a6c868b5ec24fac75478e855c6709187c72f01d791ced1d6e252667b6c9

  • SSDEEP

    48:q0r+l6O5aXyn/hNhx4/jC/Vhgx34P/ab0E:dX0Ca

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

162.14.98.134:9888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8688d3d3f5901c6c3fd85ae102e53d7303ccee51552cc6fd3a0f0f3c3ce30da1
    .dll windows:6 windows x64

    57d6e7112c8e716cfe2eb0ff9f36763c


    Headers

    Imports

    Sections