General

  • Target

    bc88170ad014e32cd536ff3ca9f88071

  • Size

    104KB

  • MD5

    bc88170ad014e32cd536ff3ca9f88071

  • SHA1

    eda8dcb2ef41be8f7c15996e0e622c4054fe8ebd

  • SHA256

    f64ee671915ec8dd0869d3ec8447015eb0cc9c94176836e0628b0b470da33363

  • SHA512

    e761177a7e3211815fc41b97c6362e8439410af22375fd5f53b503cd5008e4450967b802a7faddae4ee805a7af51d55ddac7438cca422b66303ec2ae85f29d99

  • SSDEEP

    1536:XCRCwbSV7mrP26RlT+Khe2NjaFbxNvm6UT6p:SRYx6RlhheDNrI6p

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.80.119.249:8081

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc88170ad014e32cd536ff3ca9f88071
    .exe windows:4 windows x86 arch:x86

    3baf5198a5c82b57436352743d8c8225


    Headers

    Imports

    Sections