General

  • Target

    e74ea3fe914d9d688de2036baa72a80a22577fbdc16284b39b211152dfbb3642N.exe

  • Size

    72KB

  • MD5

    b3928cde64679057f854b63bc52dfb40

  • SHA1

    4f135cc5f2d7f64cf9f80a605f6010d29870a787

  • SHA256

    e74ea3fe914d9d688de2036baa72a80a22577fbdc16284b39b211152dfbb3642

  • SHA512

    42173efe359afd6f9aa61b15048c19281da7b3fcd51be556364d5f5e6a170f4c2415d32852a9efce27cabc2924f7009e5df249699e51441d93d03214ac05a930

  • SSDEEP

    1536:IDK0IL2hvz1NaLpcFWe+Rii3Y/45fcc/CMb+KR0Nc8QsJq39:B0I2hvuFgv/e4e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.23:5959

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e74ea3fe914d9d688de2036baa72a80a22577fbdc16284b39b211152dfbb3642N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections