General

  • Target

    45b6cd2993707e6a87b0a8a14f3f9fd73edd530b47951113a36db689f33125b4N

  • Size

    72KB

  • MD5

    da108e81d29dca40eb5585f6517e5500

  • SHA1

    05acc99ffb33216b1983ca6c03b1024a959e3d6f

  • SHA256

    45b6cd2993707e6a87b0a8a14f3f9fd73edd530b47951113a36db689f33125b4

  • SHA512

    2e9e789a18d004f90b83687c4230a793348e83a584ce11c3728c2cc90924f23c427076c9b0edaa4882190872bd90b86aff75f268192d653166198b95114ea8a3

  • SSDEEP

    1536:IpJf5Uxa5/cm1hImSCuLSEc1sTGQYMb+KR0Nc8QsJq39:2Ixa5cmPI49qYe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.174.134:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 45b6cd2993707e6a87b0a8a14f3f9fd73edd530b47951113a36db689f33125b4N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections