General

  • Target

    76282776895d7747f2ccb528a441bf4a

  • Size

    9KB

  • MD5

    76282776895d7747f2ccb528a441bf4a

  • SHA1

    2c7a68aca786ca2a2bf5a49b1b8860ef7128744f

  • SHA256

    722bc86612e54e16f914f04f747a9d33f59c1c95929c5528ce6955ab42fbcbdd

  • SHA512

    601668497b47c76535e6a3d6453853dfd4b303e5c9b4fd66612529721cd868711a2977f80a47382b1480ebdc9a12d387f750e90a5d47951dbd915fd712ed4763

  • SSDEEP

    192:YE1j78tcbQbjOezyNFugzya7E5pz6HJoZZ:Hd7KSijHW3VWa7CT

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76282776895d7747f2ccb528a441bf4a
    .exe windows:6 windows x86 arch:x86

    f42abe290ec30f10b46cd4003487c160


    Headers

    Imports

    Sections