General

  • Target

    841fa2390e0eb2ebd96015c3d9593ae229839656ab12a032cd1c2447b7d7b15f.exe

  • Size

    72KB

  • MD5

    1288acec8a0451c201537bb10b0a57a6

  • SHA1

    c6765ca9e857639232f0d9e0e9a970ca64b058f6

  • SHA256

    841fa2390e0eb2ebd96015c3d9593ae229839656ab12a032cd1c2447b7d7b15f

  • SHA512

    5089cce8600adc3f10df1d141ee00531502057d90b0a88865406a6f2878908b489c0a88e70c8c1b98e1eaa381af39a3571e67602ee0668e60afa14b0378af8c9

  • SSDEEP

    1536:IkDbpIJTF1t6QlCLVLqrMyRSxpzMb+KR0Nc8QsJq3f:9bpIp5RwLVL4Mygxte0Nc8QsCf

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.190.128:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 841fa2390e0eb2ebd96015c3d9593ae229839656ab12a032cd1c2447b7d7b15f.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections