General

  • Target

    3e458a87385ee2ed41def1a89f590142

  • Size

    50KB

  • MD5

    3e458a87385ee2ed41def1a89f590142

  • SHA1

    ff63b4724f4cf16a6a697e0ffe8f6bff550921e2

  • SHA256

    4538c877ec81c4d28249c8261c9781280bebb8e03a51762466b320093e78ada3

  • SHA512

    b98e142e7a1100bdcb97f2b2b5cde324e4cab2984cc19fd2c4835ccfa9e9a975c4940e722774073a46a36e28fe6c42e3c7d6ad0253411d9d55c1a039a80c4642

  • SSDEEP

    768:yPnmyJECDEs+U/PZkvitD2RsvO9UYEo8G+BYnYXUt9ymXb:yvLJ9oszkOCRAMVoabymL

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

198.167.219.9:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e458a87385ee2ed41def1a89f590142
    .exe windows:4 windows x64 arch:x64

    7ece732248860d057c99cefbba9397d1


    Headers

    Imports

    Sections