General

  • Target

    3d7ced48b86d387369d07eb877c3a0cd78883911ca295d85a8ac5b45025e9a47.exe

  • Size

    72KB

  • MD5

    e5976ef443c98748fe327d04cf01d853

  • SHA1

    706fa53c220261c377ff315ce1119458e0a0171b

  • SHA256

    3d7ced48b86d387369d07eb877c3a0cd78883911ca295d85a8ac5b45025e9a47

  • SHA512

    2e156d8dbe7987118a0e4daa19da2b13c1b1eaf896cf79f75f559929cb8808856b9cae2735c60ee38297a65899696f7180752490d3b24408eaeb28e787962e50

  • SSDEEP

    1536:IdLkP34UDldf/eju8BzrUSAMzBBVRsUopKeMb+KR0Nc8QsJq3F:Nbd+jFWhMdFsUoPe0Nc8QsCF

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.90:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d7ced48b86d387369d07eb877c3a0cd78883911ca295d85a8ac5b45025e9a47.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections