General

  • Target

    75d5aec3d15a4e53ff3f18e805eb1c73

  • Size

    72KB

  • MD5

    75d5aec3d15a4e53ff3f18e805eb1c73

  • SHA1

    1ebe515a8a19e20e77ee3fdd16999c999d1a339e

  • SHA256

    e847846e4410eea1dc06f53e437b885e48584791db565bdea285871e259cdc9f

  • SHA512

    f88a3ae5b0207aebe121f86ff4f11350b6f17faa484cbbb503486f6ef19eda96703054afcd75b9714a9f45d80c82becfd3a51abe7c0767c8a69654f77bf690f3

  • SSDEEP

    1536:IX1eXcKJ4rKjfoyPDUkODwLpPZpMb+KR0Nc8QsJq39:+eXcKJljQy7UkODwLpe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.100.101.101:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 75d5aec3d15a4e53ff3f18e805eb1c73
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections