General

  • Target

    0fb01a3ff39734aa03d331a3e821d154

  • Size

    126KB

  • MD5

    0fb01a3ff39734aa03d331a3e821d154

  • SHA1

    f0df2cc1c97a20262c0778857756b73965602ff6

  • SHA256

    5c90ef1ebd873ac68173d7b3f8fe2a7882a64ebfeeafbe115e2509063e85d444

  • SHA512

    9937a05e2595d0b3d11b0e4d3eba3a218131ec9c888470b97ec0e820af9e71b226b7f7d5d31d37bf51a6dd4d245297dcf177b8f3257340733eaff323fb493d62

  • SSDEEP

    1536:awKJQazWPi15mqYFhbLGFKSWLtjPARwKKXT+QsCwekqYsqOEADjsHGI+S26ytpcm:EsAOLgKSqecTUm

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.228:5151

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fb01a3ff39734aa03d331a3e821d154
    .exe windows:4 windows x64 arch:x64

    bb4e91e6f53677fb912f01393f393f2c


    Headers

    Imports

    Sections