General

  • Target

    72f6cd5f830408d52e444dee2b1c2b25fb848ffade2b7a311a5408712b1d55d4.7.exe

  • Size

    102KB

  • MD5

    60542560a32afa1957b5eb95601ac14f

  • SHA1

    79e5e8b593599668ba2255b72c9504bbf05ec6cc

  • SHA256

    72f6cd5f830408d52e444dee2b1c2b25fb848ffade2b7a311a5408712b1d55d4

  • SHA512

    8d1f575d8556061d0f7eff52c97f58d2a6351ff9306dd8e02d717ca2004af3492d0d901cec957892d63a0ce9f1d40f71e88ea7c73d585cb4c711436798faaefd

  • SSDEEP

    1536:tMuPvbfh8hegR3lFHE2zFWqycBDj7q+LMRFLLL7TN:mGp2FHGtNLHfN

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.10.131:5488

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72f6cd5f830408d52e444dee2b1c2b25fb848ffade2b7a311a5408712b1d55d4.7.exe
    .exe windows:4 windows x86 arch:x86

    b83abd4147de9f42238e9cf786ce8411


    Headers

    Imports

    Sections