General

  • Target

    9969f76b456b3c5920728fa678d7abfe

  • Size

    175KB

  • MD5

    9969f76b456b3c5920728fa678d7abfe

  • SHA1

    c25e75a87c6c96b4b9e4ce5aed31d6998be3e054

  • SHA256

    15cf3df4179a56e80209fe07b610ffed803bfcb7bfe9cd98cacb46f6f836d44d

  • SHA512

    c804089256aadbc0d3e8437fffc9fa0a8bd3a0c98d488682fd74889ed06271e7f66f109ef29a34254d06efdb52ea422b0ec5885b83466a0e6bb4bfcaeb5db218

  • SSDEEP

    3072:4yqlfIZwynvIeU+5tc25trGNKxohL7HUmcA:4yafOw2vqNKKhL4mc

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9969f76b456b3c5920728fa678d7abfe
    .dll windows:4 windows x86 arch:x86

    d0067fcb32a2618b00de96885b3d3d73


    Headers

    Imports

    Sections