General

  • Target

    ac5eb566deb6f0ec1908db032930bd6c361a14c9517480b481acbe15a41502b4N.exe

  • Size

    393KB

  • MD5

    2ee89aa3a360905c0bc0fbb7cad906a0

  • SHA1

    1d965c0f20a6397b127ba0aa86f015a1118317a3

  • SHA256

    ac5eb566deb6f0ec1908db032930bd6c361a14c9517480b481acbe15a41502b4

  • SHA512

    02adb5fbcf3eda1cd59e789266404a83f31191ae6e9352280e6c488a5b23e9f7b9186de284498282a0d3ead1efe1cd3191bcd093ef8c955aa60b28e7713c0f1d

  • SSDEEP

    6144:DqCB5yIvir8oRSEELJ+mACLuSVDS8Vnzm27KopPD/lfl:DVflvirgJ+mACLuwS1g11lfl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.96:7578

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac5eb566deb6f0ec1908db032930bd6c361a14c9517480b481acbe15a41502b4N.exe
    .exe windows:4 windows x86 arch:x86

    674cb2113752d4ac6842eff91a48f03a


    Headers

    Imports

    Sections