General
-
Target
0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.bin
-
Size
1.5MB
-
MD5
a6e5b1fb6d820de1eab89f177893ca8d
-
SHA1
50955eb588e6a915c6b017c84f8e62a7acefc647
-
SHA256
0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849
-
SHA512
9cf4efcda9ec69ba36d035d7e727b49e01f598644ba7ed88e8563c39560845b1be2d88ac507214c30d62609495cd386b52f9861ed7458b1d9f44765fd5c70534
-
SSDEEP
24576:UVvAf3GbD17f+xGvqTQQc3iFwInAKPfzMc2NAjBWm5HrUq3IbWpeFy:UVPp1/SFwg1bMdN6Wm5HQq3YWUg
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.8.134:50000
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
0669d2e65b41c98eac1f71f0caba67e8219faa6526f109fa11cc722536767849.bin
Headers
Sections
-
out.upx
Headers
Sections