Overview

overview

10

Static

static

10

f5da41544b...38.exe

windows7-x64

10

f5da41544b...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49c60e3d55583dd83ab272712.bin

  • Size

    43KB

  • MD5

    301b2c354f59a4872f597405138b2c56

  • SHA1

    f525dfa7584782e02e72ad82861aac80215210a7

  • SHA256

    76eb4511e5d876539cd24add55a6ac35bed01f7dfe734d37ae5b04925d20483a

  • SHA512

    1ada3b1211867aa7d45739a80b82c74eace5d04d041016039cc06e4d54bf929e50b284c7be73bb96e9f22e1b9da591384ab3f8900a6e3528601c9fe901a8f7a9

  • SSDEEP

    768:FVM+GAeOy8fhH6GeGp4CIfOPyDAzCDCs4dVb/24VS2J8:YvOuGex/fO6DpDUB22J8

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

13.38.57.254:6666

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49c60e3d55583dd83ab272712.bin
    .zip

    Password: infected

  • f5da41544be205f34d1d63d711a728350eb8f0254e419d2a39c14cb07c50f338.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections