General

  • Target

    b2d07d013b3bc82f44cf28b2867c617625a15bcc468f208a256e4b41b5b715b0N.exe

  • Size

    72KB

  • MD5

    78dc23398567d74adc33867e44b4c807

  • SHA1

    eda5ec39095b4093c6101bbc43fea807183333a2

  • SHA256

    b917b46e4fe9de4864273e66b3f64fd332af3ae9f2b690173af74293413802f7

  • SHA512

    738a6c61b776491cef896b4fd0091504b955aafbc5bc65bc3c318f31d7c9a72683ae6b0efb45bb0e2ca3b1a5687fdb0b6cb5411d138f37c78906800ed8fcb25d

  • SSDEEP

    1536:ICa3muH79y8b/ldsUkmW2RP/4q4IylKMb+KR0Nc8QsJq3y:gro8bdKqZwqVylKe0Nc8QsCy

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.16.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2d07d013b3bc82f44cf28b2867c617625a15bcc468f208a256e4b41b5b715b0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections