General

  • Target

    1_encoded.exe

  • Size

    7KB

  • MD5

    6c098287139a5808d04237dd4cdaec3f

  • SHA1

    aea943805649919983177a66d3d28a5e964da027

  • SHA256

    53932083665adaf933f3d524e1d8399ee4530e03b53d0d39fcbc227041e6a787

  • SHA512

    a9430d0661271f5f988aa14165b945faf4120cc7ed4f751e8f2f4498a7d7c74f03652f45c35035027e112976206054af831d5bd8909377b3947a8a87950afa47

  • SSDEEP

    24:eFGStrJ9u0/68nRnZdEBQAVr5ZuqknPzS2QUNSwlZpcnUpmB:is0lnhEBQcynu2QUPlZpcn3B

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

144.34.162.13:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1_encoded.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections