General

  • Target

    769e3a9677fc591e1a964293e8be7c9e

  • Size

    101KB

  • MD5

    769e3a9677fc591e1a964293e8be7c9e

  • SHA1

    bc04173523a7763eec4a60dfa102e038d9badb1c

  • SHA256

    11471c816cf93e95c071600693cebbffe8778e79990c7f573ddae50d29cc3941

  • SHA512

    b03c97b186a3f98bbf404d2d02736a1b93bb2b639e75e134dff160f0e1924118f6f8b6bb6173c78c4458928a22f2caff20c8d9afd7b4594eafd71babd222db71

  • SSDEEP

    3072:AfhggHcWPfZEYHB/zm6s0qsWmlzeCDNJo2/hnsTd1dB:ELrZESJqs5ejdB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

152.32.153.103:7239

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 769e3a9677fc591e1a964293e8be7c9e
    .exe windows:6 windows x86 arch:x86

    d27c5a876d2f2347cbf1425cab1fa3e6


    Headers

    Imports

    Sections