General

  • Target

    payload.exe

  • Size

    245KB

  • MD5

    add2787b903455b23193e24e1ff5d136

  • SHA1

    8b20bdf29f3de33933081f9226cd749655674ebd

  • SHA256

    ead7329a75e1509d020c08b93880b473f75a96038fa1c1d6ea84ee3039d3b319

  • SHA512

    75d3916ea089022fca6090564a7718d385e11e011e765089c2086bf061932458019af39d4aab3b93c58a42f5d6faddea1f4592b6554eecfc0a0c5d95baab036d

  • SSDEEP

    6144:mqGdXu6wS0Nc8Qs4ysedqoEJ5k4qZODkD3+btPQ8:6lu6NUseYoEzrKDuG8

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections