General

  • Target

    ceef35f60b78a066fa9de635f92bd00eada3e52811ec10a0b84083829a99ec58

  • Size

    72KB

  • MD5

    9bd1fcf69167e197386c0ba2f84cddf5

  • SHA1

    b23c03bc4646d2175ef9c3d0ee7d8c52daba6a73

  • SHA256

    ceef35f60b78a066fa9de635f92bd00eada3e52811ec10a0b84083829a99ec58

  • SHA512

    aec052c78a456ede59aae59463926018982effc4c309f56d7b184e85b433c19429f2f594d02cad0472e43f96719cd7e6bc3dae20e2d625e50f3dba5339b5cbb0

  • SSDEEP

    1536:Ikpz0d1RN98WDIa+wMUMb+KR0Nc8QsJq39:hpzy1yWDzte0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.182.128:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ceef35f60b78a066fa9de635f92bd00eada3e52811ec10a0b84083829a99ec58
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections