General

  • Target

    4834b0101167a641d20a7f5cf31435cb

  • Size

    11KB

  • MD5

    4834b0101167a641d20a7f5cf31435cb

  • SHA1

    fbfcd6660d1603eea33064876d46d12f4e15b189

  • SHA256

    29c7571163bce06be1a690c682127c5a2605aa68ea2166493ceb2172115e56d9

  • SHA512

    d2e554fd7716ec14e1d66abd80458579d9fbc87d630b49a595143930a155a91fc875b23b0084daf199a5607aad2e668b22cf3546597a9ca1963dd47b1abe42f5

  • SSDEEP

    192:uG5OQN2lkjIJ1+nUDUyLtphfAuSAMSvfF3D8Oo2hJoZ5S:f0RJAUD7ftMSl3D6pj

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.90:2410

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4834b0101167a641d20a7f5cf31435cb
    .exe windows:6 windows x86 arch:x86

    1e199d6647ac3b72c5405d8457dd0d58


    Headers

    Imports

    Sections