General
-
Target
5aaa80bc6f4bafdc40f59beda4af6c7075455733977153ac031c28e65307e2ef
-
Size
13.4MB
-
MD5
dd90b11f1be5fa2b5a917736df5f28a6
-
SHA1
4dabc410bd3821bcbb396bd4fb53b2a50fb478a5
-
SHA256
5aaa80bc6f4bafdc40f59beda4af6c7075455733977153ac031c28e65307e2ef
-
SHA512
67e952b0203bdbe867385d73feb2f8da981d7d4718719bd62d39fdab9ac941fca4aff74eb95632cd00efb4c76d2969a75d02b93c0632bca37bbc8813b256486c
-
SSDEEP
196608:j4A0/BZo55gBE32hifcgw+dhSh+zVuU0XNb:j4A0/B/Bhjgw+dhHMJ
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
84.205.7.83:7167
Extracted
Family
metasploit
Version
metasploit_stager
C2
35.182.213.89:443
Signatures
-
Metasploit family
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5aaa80bc6f4bafdc40f59beda4af6c7075455733977153ac031c28e65307e2ef
Headers
Sections