General

  • Target

    2575f8c84cc819d7cd4f6305e26e0815

  • Size

    128KB

  • MD5

    2575f8c84cc819d7cd4f6305e26e0815

  • SHA1

    f6da79517f2a2f3580f49a58627eec583d47b303

  • SHA256

    7b12192b07568f15e701edd9b2b0900f1b232df3fc217d27a97985d5700a0cdc

  • SHA512

    3fc165f268bedbe52061c3b49ffae6083ca4fad86bcc3d40c64ee7e029908a986fe18cc0da9e3f25a6e33c02651076ae3ede1eb8d4894287d8f714b1688ddec1

  • SSDEEP

    1536:MY+McmfbsKFy6ma0XRgSgTeWZNfVpit00UvMFMQiNBR8NQLoEY:T+a/Q7aNfVpit0soRxLoEY

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.10.154:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2575f8c84cc819d7cd4f6305e26e0815
    .exe windows:4 windows x64 arch:x64

    4144b4faf65604a977e926d2625581c7


    Headers

    Imports

    Sections