General

  • Target

    9acbe2b60e6d204f1ff0bc726532a1ec74d0005d29ca23a895fd8dd7f1a1993cN.exe

  • Size

    72KB

  • MD5

    7539e670bbd7e21e235da975baeb0330

  • SHA1

    66136f8772a0c6a0723ce270fb5d20fe72fd3e30

  • SHA256

    9acbe2b60e6d204f1ff0bc726532a1ec74d0005d29ca23a895fd8dd7f1a1993c

  • SHA512

    4e8523fdee44e20178c76e741c8de32a63b0641d38ac3ac11935892f748df912337f33f1894ed9377c80eeb46b53615756106825c051cff866fa773a4b8cda8c

  • SSDEEP

    1536:Ij2aR2mabA7wQtSUgMsnRYreuqMb+KR0Nc8QsJq39:saBQotRsNqe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.146:6000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9acbe2b60e6d204f1ff0bc726532a1ec74d0005d29ca23a895fd8dd7f1a1993cN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections