General

  • Target

    0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297N.exe

  • Size

    72KB

  • MD5

    550ea66b1eebb32af27b101893cfdaf0

  • SHA1

    f318276f262ceddc83223a36d18d17f450e7faea

  • SHA256

    0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297

  • SHA512

    2ba88814522cf48071dc06be6b2ce6cc08914dc9cb98c3659ef42a5b7aac25fc81032ba536377b2ae30976589d05bbbadfc5743e3a8118ba7aa4d1ff043a16cb

  • SSDEEP

    1536:IA+HkP22X85MeGn+mUMRYMb+KR0Nc8QsJq39:f+y22XaFIYe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.10.10.10:443/DzRl_3k3SpNefF99OS-OeAKQRquAh1JzLNMOilMCPADHmYYq5qIR6HsyIFN8N_Tj4C7sY9jgI9ptjTVeIcd

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ac3d3b1db89dcab957fefd77ca0be1cc44bccde12d3fa6ea5e6e828662d5297N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections