General

  • Target

    0802bcc032d592a5cb8d01b460b64f65

  • Size

    72KB

  • MD5

    0802bcc032d592a5cb8d01b460b64f65

  • SHA1

    96b8480a93d76d3d375965822e084821c4565995

  • SHA256

    8447810fbed96625c8fca4ef3c212088c9cf060e7e07718cb703a56182972d88

  • SHA512

    e3a47d1a18ba821302a6d9f6f7263004f98dcd7de4176cfeff65a3ce35e9fa2fe594201221b355927a70b1fc8ce9c633e51c17cacecf933aab66e3c5761e9007

  • SSDEEP

    1536:IgUjEGkR45IyQtbbU3s/4j8FrMb+KR0Nc8QsJq39:71GxZQtfU3s/soe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.44:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0802bcc032d592a5cb8d01b460b64f65
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections