General

  • Target

    01e53c2d49448b376779b11dcfd5e1de

  • Size

    1.5MB

  • MD5

    01e53c2d49448b376779b11dcfd5e1de

  • SHA1

    6bc1cf7e751aba0891354e4d2216bdfabb5888a4

  • SHA256

    64a5c4e3a14913a278b624da80da2a912704b35f7d5ab02793d6aeef4a32684a

  • SHA512

    dca054cc75ea2f2aafbd560fab12de137ffd4d660d24fa3e8a18d9cc9944fe0b878e8d6be9ea180fbb5c779c469c8af7ee9838838f2637e70f6fda497cf226c5

  • SSDEEP

    24576:njb8gVdXjD+RNjM+2/a1IMIXXq0iUeNJmTP71wojEETd8T8A8nSERo4:vDd2RNjMX/sKMKTP7cEamSEo4

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01e53c2d49448b376779b11dcfd5e1de
    .exe windows:4 windows x64 arch:x64

    4144b4faf65604a977e926d2625581c7


    Headers

    Imports

    Sections