General

  • Target

    aeb63e531644e2efa218f76b36608d329843411fa820ea992406fbf859be3b45

  • Size

    103KB

  • MD5

    c913097cfdd82d7e2e55410efa3497c9

  • SHA1

    54d0b8bb85c30822cbd75e8cb7903b5ab34c1345

  • SHA256

    aeb63e531644e2efa218f76b36608d329843411fa820ea992406fbf859be3b45

  • SHA512

    745bdc340efbe0786e02de7f3f4232d997485ee860ae391958275fededea196d06f2e9667a18195c623d1d000a315356fc9b7a254093ae51d66b7d849d7a4d19

  • SSDEEP

    1536:YeuQhHozNCss1y9maGWXRgdGeW0wYNR3N10UvMFMQiNDRH9HK:YVyHozg+JgRwYNR3NWSRdq

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.133.128:9999

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aeb63e531644e2efa218f76b36608d329843411fa820ea992406fbf859be3b45
    .exe windows:4 windows x64 arch:x64

    800bd87cee34c46f3bf93a471175dfa6


    Headers

    Imports

    Sections