General

  • Target

    7b574e91c48d17eb0e2cb0c5c1935654

  • Size

    235KB

  • MD5

    7b574e91c48d17eb0e2cb0c5c1935654

  • SHA1

    0ea37d34d0e70534757a3b472ea81b2759b27e88

  • SHA256

    baa6e75779cd165a51bee636d572e0603328995937577f05aeec17b07dde2f76

  • SHA512

    de5031c8b4dfb3f3b697a4eb6ec1d0b00fe7543f87aa1b6674060367c48fcc539d3e9f302b6352dee2e49e7cfc45fdaecc1b2c2455273b4bbc28b68ec32b2472

  • SSDEEP

    3072:cD6JsPYAcjLZWFi5vLT2Qn6AAN/UmCa2njDpx:cD6vAcvZWo5+Qn1AN/Yaej

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.16.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b574e91c48d17eb0e2cb0c5c1935654
    .exe windows:4 windows x86 arch:x86

    238326905f5ecb77f8246ad0da1e6358


    Headers

    Imports

    Sections