General

  • Target

    02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e.exe

  • Size

    72KB

  • MD5

    a72851f5ecfc3126e44411bd482bdb33

  • SHA1

    90d3044a4409a6b1bcfef94dcb1213ecf743eabe

  • SHA256

    02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e

  • SHA512

    b932ce3631600669bbac4c96760ffe4cac03172a8a1523730b571d5d8b44783f52b6600311cd7dc0dd4a5698bdea57c12e75fd6fcdd4dbc4481e6f58134249fd

  • SSDEEP

    1536:IzFc9dgD7+oM/zGcm6/MDm3aUAOMb+KR0Nc8QsJq3V:cFcIHI/zWtXOe0Nc8QsCV

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.96:7578

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02ae69b5a9576918f598dc0efe90644d91b962f4890592f949b2caf60f01391e.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections