General

  • Target

    5acbaafdf502ed1302fa12169d05247b9244f45896d2fc508edddca8e991a329N.exe

  • Size

    39KB

  • MD5

    5d1012073dd2b22adfc368d9ad21d140

  • SHA1

    5fe90cb3ea6dcc418a066d1b07b63e6eb58a3cd2

  • SHA256

    5acbaafdf502ed1302fa12169d05247b9244f45896d2fc508edddca8e991a329

  • SHA512

    ec4e99865366ec7f7d2a05e009892d6c6b9a85fb7cc341d114fc331ac2533f7c39b083203d9154bea109270451110dc71e78331e4b810064e35fd3c91f2ca1fa

  • SSDEEP

    768:w7BjaBtKy7ew9DtlcECcEf9uwQ2tZClItg2HvHRnvCKl:ca3qw9DfckEfYIgIiw0Kl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.18:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5acbaafdf502ed1302fa12169d05247b9244f45896d2fc508edddca8e991a329N.exe
    .exe windows:5 windows x86 arch:x86

    0e73ec669a8245790d02f257deaa91e9


    Headers

    Imports

    Sections