General

  • Target

    3746d951fe25b8f8c161e2c1853f013a507a70480ef3209b291c95feb09dd124.exe

  • Size

    72KB

  • MD5

    fbedddb93fa169363f734668625914a7

  • SHA1

    0b207c12e71d33f641587645827af65b9ea3bddf

  • SHA256

    3746d951fe25b8f8c161e2c1853f013a507a70480ef3209b291c95feb09dd124

  • SHA512

    97bf7ad0d3a3b34db388c08079943d22e679a02a2b45ad4a31506e98c03ed30ca9f456d649d77e4963b90d0b11d67cb2f685701ca41852222f38e07cec9a523c

  • SSDEEP

    1536:I86XWgc2eiH5eNbOPnJceEpsmMb+KR0Nc8QsJq3f:WmgmiZ2bOfJceETe0Nc8QsCf

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.86.128:4443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3746d951fe25b8f8c161e2c1853f013a507a70480ef3209b291c95feb09dd124.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections