General

  • Target

    bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622N

  • Size

    72KB

  • MD5

    125a1a8f286c535b5d62838d8a480570

  • SHA1

    645c7ed41e97f8789f309d1cce69cc4c9b97f76d

  • SHA256

    bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622

  • SHA512

    d941351a8731884a459d7ae61b2079d0f2cc2e5c1b15ca7d4e74f6fd4b9f4375146f70e3e1056323cfcb8bcb732ecbf4d3beb654f58b4674095524e4b9ab1c7a

  • SSDEEP

    1536:I28ksADeH55sC/6rQcQncIwFE0os9LmMb+KR0Nc8QsJq39:tsADoBSQEFE0p9Lme0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.246:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcdf3447b4525a17a5a4e68602644b6dd14b368b64c80236525f1c281fed2622N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections