General

  • Target

    95ae141a7d05b32da362f0c54cc00d7c14c25b56c1f61d81eb4806702b8f08b5N

  • Size

    72KB

  • MD5

    bd1d82ee2975e8e58ea678349483e470

  • SHA1

    f556285502d4cfeb364787f154dee865520161f6

  • SHA256

    95ae141a7d05b32da362f0c54cc00d7c14c25b56c1f61d81eb4806702b8f08b5

  • SHA512

    798d0095ddfdda42f4e077987c8a1def11a14d6b4fae93b3129e9f930af843fdeb1c3323e0d126e103fa104311f86c72a7c300e8168bae2f77a36eb90848ff8c

  • SSDEEP

    1536:I6/u3nLzhsIHriC3888FBci0DpJMb+KR0Nc8QsJq39:XunXhsIHrERITe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.100:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95ae141a7d05b32da362f0c54cc00d7c14c25b56c1f61d81eb4806702b8f08b5N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections