General

  • Target

    5a9886cdd997339c90225869cd874d80N.exe

  • Size

    4KB

  • MD5

    5a9886cdd997339c90225869cd874d80

  • SHA1

    6625a1a1748e47b8aba3be1e662ac564e06c7e93

  • SHA256

    65175e0367037b3e5be9a38c6eeda68dbb02455c6037c21707f155146bd8212f

  • SHA512

    61092267c4d97186d07f18b8e10484b3032c7c75902f68bb76ab2c61fbdbb027c38fc5a54a5914775b03477c1348adb9c00cad97a3ffc9c87ac5d8f0f888fe02

  • SSDEEP

    48:6Pi8g4LSSXzIEcnyZs/1tb7YWh/qsy0p2c20W6Ou48Dmth/UAdxf1F/AlJByBdo9:urgAzI1yq/1xBpfN20W6OG6/UcnMByA

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.240.110:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a9886cdd997339c90225869cd874d80N.exe
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections