General

  • Target

    7e0e307756f684cfb18b477ea8e49dd6f5eb06f5bed117d71a019970a8e9cd03

  • Size

    10KB

  • MD5

    e515d9da1f0dc01472d7043b16165dd9

  • SHA1

    facaf785b294b8b8024530e2b25880edc23c7c69

  • SHA256

    7e0e307756f684cfb18b477ea8e49dd6f5eb06f5bed117d71a019970a8e9cd03

  • SHA512

    856200e77ece2ba9ca2d39419d78e46805213af1528baaa2c1e16487953f197a1936f9e722ee6ff2e660c712c47d11306fec68994c5272f178fdedc330d42c3d

  • SSDEEP

    192:6lIMraj7M1wyWJrRNjOfEZYUD7E5pz6fMwGQ:6lIKC7S6JNNjvlD7Pd

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e0e307756f684cfb18b477ea8e49dd6f5eb06f5bed117d71a019970a8e9cd03
    .exe windows:6 windows x86

    8433fabe8228b8316d7b09a081598dc9


    Headers

    Imports

    Sections