General

  • Target

    c5d6b2c56e0c43c8c7a01e7fbe1d4ff533096c67c327cf82d5e153c222202811

  • Size

    72KB

  • MD5

    e31ec31f9ebdd3c1b293f6b86f177601

  • SHA1

    300e0b7d7502a56bae4b796a9d9d0d3f560632d1

  • SHA256

    c5d6b2c56e0c43c8c7a01e7fbe1d4ff533096c67c327cf82d5e153c222202811

  • SHA512

    07f53cd4df45bce989368653ec4c72b6a532c3a008dd6737deab01e6e23e97b3df7e78ba72cb2da93404de6c39664bcd796e0a82c135145f4fce77f049f263a1

  • SSDEEP

    1536:I2rssxZbN26U07q03pnCtmgMy3CUMb+KR0Nc8QsJq39:Pwsxl0GCaySUe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.71:4455

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5d6b2c56e0c43c8c7a01e7fbe1d4ff533096c67c327cf82d5e153c222202811
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections