General

  • Target

    0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c

  • Size

    2.3MB

  • MD5

    ae7adf1cb1c34114e6d527a43d5c28b5

  • SHA1

    15b0bc002714e725a805a8bf471a939dcc814fce

  • SHA256

    0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c

  • SHA512

    5454fb6b6b06ade6f9459884999739934ad4a21a211bc48ac20978105ef5d741f2fdd12ba424238116be012e468645936e280f36cbb3d1ab5097edfee8a309b8

  • SSDEEP

    49152:xr/KPLe0RLCxriiiiINsMdRPLe0RLCxriiiiINs8F:xrmLB0WiRIeM/LB0WiRIe8

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:1999

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0203935447a499e04704f48442dac69658ded78defdf6af21d2a7f46fb83ef1c
    .exe windows:4 windows x86 arch:x86

    8227c6eabd67afa394d75fc0c2cd7669


    Headers

    Imports

    Sections