General

  • Target

    ee70b7130c9fb009dbdbcacf57285274

  • Size

    234KB

  • MD5

    ee70b7130c9fb009dbdbcacf57285274

  • SHA1

    446b65c5789fb148b9df9a848d41557f90d79370

  • SHA256

    3de444790830f09cad4a63b5983869fb841cd598583953250563ad516d31fe0f

  • SHA512

    60fb80a1d07e619352daeaa87fa76a31e23b2f6d9c60f909645e938372c7324db01a1643d1dd002194067223e2be54b89b86b8ac6c645b18c0eede23333f8e83

  • SSDEEP

    3072:edM0TqA/HgxaY0W0LVWtUmVLT2Qn6AAN/UmCa0njHT:6M0eu8D0WOVW+mwQn1AN/YaUn

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.7:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ee70b7130c9fb009dbdbcacf57285274
    .exe windows:4 windows x86 arch:x86

    d2c01bab74faf8a2aab28ae9a4e63c4f


    Headers

    Imports

    Sections