General

  • Target

    06ca56c3fb1a70261a809d6d4b6ff52782eda419d4c58f0b34e9b8b77708151b

  • Size

    10KB

  • MD5

    11829e3923445916c9579963051db1fa

  • SHA1

    03e77ecd1c977daf8073031dfe91082f9e8d3ee3

  • SHA256

    06ca56c3fb1a70261a809d6d4b6ff52782eda419d4c58f0b34e9b8b77708151b

  • SHA512

    12ced51ffda4019a1bde3980d17e2eff63e99d2ca44796ae167b620b6538c73e8c67406f3b4587bbd9e7576168b0614786318d0b0465ac03c9d0f5011c3ab065

  • SSDEEP

    192:v9aj7stQKWJrzjOX69EOegPb7E5pz6fM46l9:lC76iJXjLGOr7/c

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06ca56c3fb1a70261a809d6d4b6ff52782eda419d4c58f0b34e9b8b77708151b
    .exe windows:6 windows x86

    0fe64c635c0beb1e0b389b476b920ca4


    Headers

    Imports

    Sections