General
-
Target
aa37998e9332b01cabc233b9c8beca6f
-
Size
46KB
-
MD5
aa37998e9332b01cabc233b9c8beca6f
-
SHA1
e2e73bd0118e44cd9a258fa4b8ae518a26dd2e96
-
SHA256
a7cd7b0f8bb9000d2df8e665a38e57c52a5cd38f6b9f33dcd83fc6ce4fbc5978
-
SHA512
d7846852bcc1c6e49cd1987f8242d8cb207c9567fb932e5710ac9e70321384f8a0e0ec42688d3aed707209502cfbf389585ffd0e29ff9e41e563e6740dc04f1e
-
SSDEEP
768:IWBbzRw8NiXa4tnokZhrqm8KOP/4YJcuV6aitwdLQrQTDWlv+ugSl8W/qvm2q3:Ik9wRa4tnpXbzY2uVqSdYQPM2ugVtq3
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
192.168.1.2:4444
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
aa37998e9332b01cabc233b9c8beca6f
Headers
Sections
-
out.upx
Headers
Sections