General

  • Target

    7159bb3d0549a9c5862a34bc7ddf580b3a8f6ee8fe611c344b2e9b256d3cb44aN.exe

  • Size

    72KB

  • MD5

    77f41d255afc2d25ea7593b0b2eb7c90

  • SHA1

    e44517c2c75ed17c1367d1cb6ab4c9ceec0fc41e

  • SHA256

    7159bb3d0549a9c5862a34bc7ddf580b3a8f6ee8fe611c344b2e9b256d3cb44a

  • SHA512

    b7eb7e8c3925a858786cb8c7ebdba2f404b777653968dcc6c6ee3c2d37615efb277ace7a05a0c50812519546309112eeb45e4c3f040bc978f19baf838030f419

  • SSDEEP

    1536:If3h5JAkSnyj4iI7cV3ku536IDuwCiMb+KR0Nc8QsJq39:C3/2PCI6TdDuw7e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.14.162:1443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7159bb3d0549a9c5862a34bc7ddf580b3a8f6ee8fe611c344b2e9b256d3cb44aN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections