General

  • Target

    7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a

  • Size

    72KB

  • MD5

    babaf56bb3d7d9ced496da4cbae1c324

  • SHA1

    e8f74a988c3c8a95ea79ff851a6f49f7fae53a84

  • SHA256

    7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a

  • SHA512

    f30b8c7703d065c5d0239f505e57c6280eadd075e27e91e5e40f5006b2728baa1114a3548ec7c9a9adc434767cdd9a0e7eab173057cfb003f52eb961a5a61bdb

  • SSDEEP

    1536:IXDQfsHTfdjbBVfM0dENHYQbeMb+KR0Nc8QsJq39:kZnjVEljye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.121.128:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f443c02fe8959435d195520946f26abc09babebc9115059478e46454bb6239a
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections