General

  • Target

    ad2f903844faca9b949be4ad23ecb37eb07c7920c511f7f434179b54774ea776N.exe

  • Size

    72KB

  • MD5

    ddf07637d4b932c1f691bf6cb8715b20

  • SHA1

    99954be25876eb53dae46b06c831c4d1aae248c3

  • SHA256

    ad2f903844faca9b949be4ad23ecb37eb07c7920c511f7f434179b54774ea776

  • SHA512

    43b0bbc701d9cb000c8a8bc13f0e590fed843af64b43291442e8e9181ee50bfd43828d680a59abb64a83bf6691660ed4f3f9a186fd89bb3e22be9a1cabe94121

  • SSDEEP

    1536:Iv5gaCXYmUonPk75iIFhMb+KR0Nc8QsJq39:qG/5nPk1iIFhe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4449

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad2f903844faca9b949be4ad23ecb37eb07c7920c511f7f434179b54774ea776N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections