General

  • Target

    941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe

  • Size

    1KB

  • MD5

    f2ce3c73b93dbf46f5f6eafa9802018f

  • SHA1

    f262b2bf23ecba4b5e0125fdb224978b94394165

  • SHA256

    941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66

  • SHA512

    5a10152484d20d2d77688d4aca5464d1446bdb3ff4f489f6548240a564e6a0b4d8e5f5bb63f1c1b4affb3d1343a96363ee7fe7c5408122965646b65eac7ec216

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.36.128:9999

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe
    .exe windows:0 windows x86 arch:x86


    Headers

    Sections