General

  • Target

    9dba3c80346817d71ad06a9143dbbe0d419a929c3a6acaf8d12f25ca07a60a23

  • Size

    3.6MB

  • MD5

    6173978fb59591ad797b60464464265d

  • SHA1

    0311d886b8aee7c1441e6a1f844cb06ef62302cc

  • SHA256

    9dba3c80346817d71ad06a9143dbbe0d419a929c3a6acaf8d12f25ca07a60a23

  • SHA512

    153ee6ce4af08d4e0c1130618afdff287a71197f5796612d356e19ff079e5e60e6c36133f9a55a86f893dc2f6c0e5741908e1396d5c63cb034790e2d96df72fd

  • SSDEEP

    49152:tOoTa8xYYdI20ES8ykoRz6RkyymtN15Fqbokh5rWHyAlI1Pnfxx5K1XPQsm6gcDW:gomHVYSTRz6RkbmtNPMPWS4bs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.3.82:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9dba3c80346817d71ad06a9143dbbe0d419a929c3a6acaf8d12f25ca07a60a23
    .exe windows:4 windows x86 arch:x86

    21314122cd4542a6b9b297f52a87acbe


    Headers

    Imports

    Sections