General

  • Target

    7d21f0c1867ae78eeef89ace012e250371e08cd61ab54029d8d8ecfafdaa1216

  • Size

    72KB

  • MD5

    294c4ffc45b9ddb0ed430f8d1e788da9

  • SHA1

    48712459b451d92744c3f6ed8f2a853662ad9471

  • SHA256

    7d21f0c1867ae78eeef89ace012e250371e08cd61ab54029d8d8ecfafdaa1216

  • SHA512

    a882e59fcc36f0324de51f4804b291cca1034a6a23138466e26d790c0f7bc94e2d7c85c6701cfbccfde2488f209d90500f050c648da05bbb99049fd6fdad860d

  • SSDEEP

    1536:IFJM8fdPX2zx+m0/HgKJmLMb+KR0Nc8QsJq39:kJBjm4gKJmLe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.153.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d21f0c1867ae78eeef89ace012e250371e08cd61ab54029d8d8ecfafdaa1216
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections