General

  • Target

    1be46dc2ec11474bfdb76bab7b78e1fbc8a2b60a4b7f9ee623b0c307c163ec9dN.exe

  • Size

    72KB

  • MD5

    830a9049c884e050d2cb2b304244ba70

  • SHA1

    09fc14898df6a7a8b7ec40734783396d292c5032

  • SHA256

    1be46dc2ec11474bfdb76bab7b78e1fbc8a2b60a4b7f9ee623b0c307c163ec9d

  • SHA512

    47489c1c3b1eca501082bdcc17b95416a18df3f591303df9ab51826dcbb0742867148e01e161049773131a1bd07a9dd3dd9e790f6b7bbc8db2ef5a12530f3029

  • SSDEEP

    1536:I86XWgc2eiH5eNbOPnJceEpsmMb+KR0Nc8QsJq39:WmgmiZ2bOfJceETe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.86.128:4443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1be46dc2ec11474bfdb76bab7b78e1fbc8a2b60a4b7f9ee623b0c307c163ec9dN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections