Overview

overview

10

Static

static

10

yarden.exe

windows7-x64

10

yarden.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    yarden.exe

  • Size

    7KB

  • MD5

    a5b0224c89969fc4e60e6cf434a43c65

  • SHA1

    cd55a1c0ac6c2e7c2a356981373f0c5bc76fa43c

  • SHA256

    906e243cc3a1ca470e6bb57b5aa005198368501cbf52b6f8be7c7292b7c6cd9e

  • SHA512

    7b73ceb9729df92bd664886d294a8cb34b7cbb1ced8f0ebd8cf37c4eb6b5c300db91f1019a9ec98e244c0f114839f5179d4905065a34ee320402cf3ae30d8e87

  • SSDEEP

    24:eFGStrJ9u0/6O0nZdkBQAVoaYNq9KZqUeNDMSCvOXpmB:is0rYkBQVts9CSD9C2kB

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

35.246.15.72:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • yarden.exe
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections