General

  • Target

    7ed1bd6b5a84ee77eeab77aca40487a0ebcf2fa2bdb6a7ee7896958854c56afcN

  • Size

    72KB

  • MD5

    a306f62a4a5849efb2de94ab916fca60

  • SHA1

    00e8a60c57b0f2ce76a556661a40cd855da980c5

  • SHA256

    7ed1bd6b5a84ee77eeab77aca40487a0ebcf2fa2bdb6a7ee7896958854c56afc

  • SHA512

    17f3fb54137034c8e11f4c234e98f0bf1d49ba08cb6465963f227a2e5d4d3d55629de72106b37216ac357dd4df2cbcf434e7e7c4fd980d8f522e0e6186166c19

  • SSDEEP

    1536:IcsS/djNtk9qbkBVfAQrFY7auymMb+KR0Nc8QsJq39:VsgL68WVfjrFWage0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.18.40:666

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ed1bd6b5a84ee77eeab77aca40487a0ebcf2fa2bdb6a7ee7896958854c56afcN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections