General

  • Target

    774caa288c1bae0d69a7e4d0729d5980N.exe

  • Size

    72KB

  • MD5

    774caa288c1bae0d69a7e4d0729d5980

  • SHA1

    abc499d2ac62519854c2680201501ba79fb61e87

  • SHA256

    b4b81732ca3e960d9ffc805f9521629985efef704621555be5241782bf9ce5d2

  • SHA512

    eae78ed9b49c900dc3dd1f943ebb1dc6858a9fba480bb85053895ca4f91c1c8abebcc3ba4e3c49c0ef11d26306900c26644731bb019b23bb87e59a27f4b3d7a8

  • SSDEEP

    1536:I6olfrt/3XDA7BleNRBFMb+KR0Nc8QsJq39:fodtnD0Hide0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 774caa288c1bae0d69a7e4d0729d5980N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections