General

  • Target

    9bcbf59e4310a122699f6c0c433f757a

  • Size

    35KB

  • MD5

    9bcbf59e4310a122699f6c0c433f757a

  • SHA1

    9e745dd7537ea54678077d264837282be5af6961

  • SHA256

    cdda5bb548dbfb609420920c1232a9f274cdb771ddbce53e06b05a8e6a319011

  • SHA512

    5ae56623f715432740bd37a22eaf9550f48340888a34b6b3f0a14d94551b5f16b7cc5638b3f9a4a13a9d70e96f6e74ddbd20a4c57e51d8c744ea84a8820be854

  • SSDEEP

    384:1zlqLwPjjcKlD3nQjTDUzeVLp7jrZIwPhkH/Bo7cCdm1l:BEcvcW3nYf+eVLj5hEBo7LdKl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.9:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9bcbf59e4310a122699f6c0c433f757a
    .exe windows:6 windows x86 arch:x86

    6860f21ad1e354b2b7e221c47ba39231


    Headers

    Imports

    Sections