General

  • Target

    33f3da356be5a54dbd1c837b20fb8d93

  • Size

    27KB

  • MD5

    33f3da356be5a54dbd1c837b20fb8d93

  • SHA1

    67e291a4103c14de33810e739a4b0b34c5ba5447

  • SHA256

    ab1215d458da8fee0275e035c8105365e0959b2bfbfb6e2ecf1e953dd5a3adf4

  • SHA512

    83cd3330baffcc1d3e98afef95a315f0d8f3df90f4db09bb0daab995b60432e93c24e356f1603f4e83b89b044085a547d40588c30a4ca4174f293093a58c3f0e

  • SSDEEP

    384:QzrbOYKWCJxhd2WS/YWyiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiLiiiiiriid:ICbPQ7

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.118.128:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33f3da356be5a54dbd1c837b20fb8d93
    .exe windows:10 windows x64 arch:x64

    8eeaa9499666119d13b3f44ecd77a729


    Headers

    Imports

    Sections