General

  • Target

    533c58c2435c0c43ad0beba0e9540cb7

  • Size

    346KB

  • MD5

    533c58c2435c0c43ad0beba0e9540cb7

  • SHA1

    baef0ff01487973a4c9629b41c1aa93d8cf336fa

  • SHA256

    e9a9ac2c3f65ade197fdd21e40e45131b93258b68b1c4d7dd0ba220cd652beea

  • SHA512

    2aaea0419c8b8dbf93b19754cec5ecd1879f76278c42af20f89d3b5621db37d2e66b5bfd32f5b9fc77a121d7babf4b478456d0a25e634ef26effab28db3501e1

  • SSDEEP

    6144:cUZpZnEc/Wm/NcMwIlzAC4Zuo72bolFGRBCg4z7i1xGerEhgVIXFMLG:HXBEyWwGMTlzAfZF4JRBCVRerLIX/

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://osik.pl:8443/AHYPC

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 533c58c2435c0c43ad0beba0e9540cb7
    .exe windows:6 windows x86 arch:x86

    af1733385ef5722e64a2a16dbfb35a22


    Headers

    Imports

    Sections