General

  • Target

    8f1521da592137962c08fee58950e31c1477ef5cad97697f1321ed3870221aeaN

  • Size

    72KB

  • MD5

    e1d06b32830803cc02cabd19cce606c0

  • SHA1

    621cdd98bf347da803077c21b9b69d3918176d20

  • SHA256

    8f1521da592137962c08fee58950e31c1477ef5cad97697f1321ed3870221aea

  • SHA512

    f8da60d4486a329f4526e66a5a850d6798032cbf4e92742040aeccdc7ed85049d1a08c136b18d89266859da2febc084f9c2e33781a6ea3f80fcc60a9453652b2

  • SSDEEP

    1536:I5krNyPp3pDidt4CphOK4Vy95ZNMMb+KR0Nc8QsJq39:DByB3KdphOTy92e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.30.1.22:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f1521da592137962c08fee58950e31c1477ef5cad97697f1321ed3870221aeaN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections