General

  • Target

    462d5fdccc918daf71b8927b0eca396c

  • Size

    7KB

  • MD5

    462d5fdccc918daf71b8927b0eca396c

  • SHA1

    c7397091900ef7aee527d0df8662d569180cd429

  • SHA256

    60eaa7223ac3695e1982510af33f15956ec2fb782a92b3a93c3a98354e60dbf6

  • SHA512

    fad8f5a5b4267ec8e9dda93d829e2e824215c0f0fe19b446cb81026d886104f9f8cb22f8279fe3de81fa27f40b3707930ec70f11a2be497175f791a15c9e556e

  • SSDEEP

    24:eFGStrJ9u0/6KonZdEBQAV5GlwWdR2kfi6b2Kdl7pmB:is0X8EBQwWpfiINWB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.8.123:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 462d5fdccc918daf71b8927b0eca396c
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections