General

  • Target

    bcc157710af2ddc44b0f77753f802b30c6f9b565cb19b9777a3b5e33150eed71

  • Size

    72KB

  • MD5

    ea248b67abc44ff53e56edddb9b33616

  • SHA1

    b1fedb9ecee6ce7ae7a2f69297d919c16fd024a1

  • SHA256

    bcc157710af2ddc44b0f77753f802b30c6f9b565cb19b9777a3b5e33150eed71

  • SHA512

    8385c736df337865e419b094cc527e11bc9d364f3c3ef4325eaa052007f4cc37377e005a9125fe32c854418ee1a3f2b981f99a1ef4bbf1d4965f8d0f673537d1

  • SSDEEP

    1536:IGcXiL+CIZrpdivI3hzS9LjeITMb+KR0Nc8QsJq39:ASL+CI1pdhu9LjeYe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcc157710af2ddc44b0f77753f802b30c6f9b565cb19b9777a3b5e33150eed71
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections