General

  • Target

    4cce2fb448097499e7e467ab0ce63ee0N.exe

  • Size

    72KB

  • MD5

    4cce2fb448097499e7e467ab0ce63ee0

  • SHA1

    9646b583553270d9f95abed5f44ea166e7be778b

  • SHA256

    1100e6de2f4a5265a8468e8221dac144ac06f0c5f34a6d4e9ad24f5d80574cdd

  • SHA512

    8dfe0fa9c87eb0b1e353233af0cc9cd36171017e032f2ac25cc2c2ded4a19c67f674b14b87d75c69197468a0d1df5f12ac9cf0175eeacff3845073293f367350

  • SSDEEP

    1536:IL9l7xAbLX4qVz72SQiSNuZelMd4utGMb+KR0Nc8QsJq39:ml7KLXtVVQ9TutGe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.96.130:1001

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cce2fb448097499e7e467ab0ce63ee0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections