Resubmissions

12/06/2023, 09:08

230612-k4cmlsbg5s 10

02/06/2023, 05:46

230602-ggh94aad8y 10

General

  • Target

    ms17-010.exe

  • Size

    72KB

  • MD5

    3084200212c01eed44e6c6272b109849

  • SHA1

    a7ce7b252380e868a245d033b866d4f84bed923a

  • SHA256

    24d74807c41903a53991a16497c059fab510c6f946c85745a4ce888f3fc1e4c4

  • SHA512

    b49bf91611475b1ff6b4eb90d996e24ef0e4303181423a5d0f4b1dc10538f607996d7356f25692f5f642585b553de9182d9c97b2bc52f017bc7c81690e03ddc6

  • SSDEEP

    1536:IY40JdLyro0Jm66xCo/BYytKMb+KR0Nc8QsJq39:n4Qdt0Jm66sWtKe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.119.174:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ms17-010.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections