General

  • Target

    5885c61360bdb6e35c0b41dca6db320e

  • Size

    2.9MB

  • MD5

    5885c61360bdb6e35c0b41dca6db320e

  • SHA1

    e111ddf945fd4a085cf80b430b299bfd606fc3d6

  • SHA256

    64164aac8a3a5da6ed678b691fd7018ad915df42a27e6d6b54c894ddb29e0e1e

  • SHA512

    11a0dc9126ef3a13dba3df1508679c6bfb4bbd7942021c8361d2e80d90548d6e9c3e2f8dc8891e014314833b815ad0300d457a877e3962ec70b0c72a886c983c

  • SSDEEP

    49152:Crp+uQG8KNnXj6XtXqQ4ZZWSdK7+t/eqQItKaWgDT4L0285j/qdz1RHPwxw73bsQ:Ml8a5J7DTJ2sCdz1RvwCsRe

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

90.251.31.196:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5885c61360bdb6e35c0b41dca6db320e
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections