General

  • Target

    33e05850ad449beeb23a9b18edb84402394f1a1ed4aaa2e72100e790797e813e.exe

  • Size

    72KB

  • MD5

    1e4d37512b9fe533da0d4763b577e8cb

  • SHA1

    bce2b775648f3934aedb82a5af8dd0be23619e6c

  • SHA256

    33e05850ad449beeb23a9b18edb84402394f1a1ed4aaa2e72100e790797e813e

  • SHA512

    c71b800ac7ebf59b96cd2f638a479d116a83df7f16c0fa487cda7b23a4963bf6e7c04c73548cc55699363fdac7e1d2d4142c2a89eed64906b329aaea4f2f65be

  • SSDEEP

    1536:IC3D9YWhdDGNzMulvrjmSPHqmMb+KR0Nc8QsJq39:/9Y0ExMcraSPHhe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

108.165.228.115:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33e05850ad449beeb23a9b18edb84402394f1a1ed4aaa2e72100e790797e813e.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections