General

  • Target

    2f93077f05b30dfd6479f12c6ec058b9a75cd11b43cbcd1b4315aacaa32d01ca.exe

  • Size

    72KB

  • MD5

    ce00a12a39d7bec5cd97e2f5e37813eb

  • SHA1

    601c6857d66edb292fcd32913af277c3287e7624

  • SHA256

    2f93077f05b30dfd6479f12c6ec058b9a75cd11b43cbcd1b4315aacaa32d01ca

  • SHA512

    396b2fcbb94a16a0594f3a89a21e856695db55d3740aeb3ba17d12ebd1dd4981663f9d18187734356c0859c073227115b39b98cb85b5c73fe7841d01c675e376

  • SSDEEP

    1536:I0AnSAcHM8JtjnJO7SvJ7OuVTI2vvUJMb+KR0Nc8QsJq3P:9AnVmvnJVhCugJe0Nc8QsCP

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.16.1.32:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f93077f05b30dfd6479f12c6ec058b9a75cd11b43cbcd1b4315aacaa32d01ca.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections