General

  • Target

    e265e20151fda9fa6e5d999a1df1c2b349179fbf2914f353b8aededab8cd0658N

  • Size

    77KB

  • MD5

    3cf692c3be7dc2460fa84e419702c070

  • SHA1

    c8984106554647228e454a126a3d3018dd06265e

  • SHA256

    e265e20151fda9fa6e5d999a1df1c2b349179fbf2914f353b8aededab8cd0658

  • SHA512

    045cfd5eb4aa7e578466851a12ae7ec4a0c759d7941aac98f2abf974ff5189c767b4e21703174fecede59c9b6dde21381e32616f417c0438a9dd078265d724b0

  • SSDEEP

    1536:ICzGooWBLPJ1PV3OtQQ219yjoMb+KR0Nc8QsJq30fJ:lGtoLP/PEaQzse0Nc8QsC0fJ

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.10:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e265e20151fda9fa6e5d999a1df1c2b349179fbf2914f353b8aededab8cd0658N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections