General

  • Target

    6c209b74b50b6e8b15dec1554f933bd9377a5323f70cd238be2f59714b916315N.exe

  • Size

    72KB

  • MD5

    6fdd70ccc37c8290bb3f86fc2b6f1d80

  • SHA1

    2cd76ccc4968e31bf792a7f51214c033b17b47d8

  • SHA256

    6c209b74b50b6e8b15dec1554f933bd9377a5323f70cd238be2f59714b916315

  • SHA512

    e8cf41b6cb64637520ab6157b3a45c8cd0ffa00bfe22b1010c16fbc3f477948f1b0e6d91109be87b9cd8bd98f3029553eb10a3fcaf87e5a0b97315296f3307d5

  • SSDEEP

    1536:IpCGlYFZvbQvU93wCl2a1FYtV+Ccc+IJHBMb+KR0Nc8QsJq39:ZG2Fd8W3JYfbt+IJhe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.243.137:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c209b74b50b6e8b15dec1554f933bd9377a5323f70cd238be2f59714b916315N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections