Overview

overview

10

Static

static

10

5f55b51511...97.exe

windows7-x64

10

5f55b51511...97.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f55b51511c88a09f5e49e91e3404097.bin

  • Size

    350KB

  • MD5

    5f55b51511c88a09f5e49e91e3404097

  • SHA1

    9a89a5d1fbecd3ce5c79a10d31c96e709277c7ab

  • SHA256

    2c20098ca704674fcea02bf92847b475a07b46b1166aebf4934c1f4f506672f3

  • SHA512

    09cb2845861b1e6b3739a417307dd3bd3bbd774b826bc984676b99669624da84ea78a3c62c6c5f50ccc8e7135e1f62d9e6faabc9e76907f3d326422c4cb88e9a

  • SSDEEP

    6144:nEWjlZs5t38dX6piE4tU7kpiTcnFOHuln+Otc+EkzI8jSejCE8aKP3sGvLLhcy/W:E1nfYFXDA7DdCi/6OuXXAR8

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://64.254.247.154:44556/yySpvJzTp0rtDewMiUvRQwWkApudwNqvW5r5JtD6M4kq9gCtlmxM6pef33Co5I8A1D7Y-8BmurRBEJwoe4ln0N3fW9UTJjqTfmUhsYHBeXchLuk7JNuR1REIKOOcjC39rFBODJt39x2pY0OXmKrYQnjoM2ZAA9clSsB4HNCmp0Tct85Rd_4q_-rH5e7weXbly6Bhfwv

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f55b51511c88a09f5e49e91e3404097.bin
    .exe windows x86

    5fadd4368d5823da256c7a4032dc0255


    Headers

    Imports

    Sections