Resubmissions

02/07/2023, 20:24

230702-y61dcade87 10

General

  • Target

    WindowsUpdater.exe

  • Size

    72KB

  • MD5

    64b1f36cab93c76780b8f12d709997ad

  • SHA1

    37cdb23914e5cef697790fad4dd04685aef700a1

  • SHA256

    37b519d6749eacd0993f9d8837d24ca7bfad2a89a240be2573007c7da8eb82f5

  • SHA512

    1fd4d18aa4d99e0ab34baeaeda4aca4e5ba62f3510bbe7968aac03b045aab0ce17dd7f3ba37d2519823fd80ec26f199d9bd5ceb0a608c0d3beb593a65bdb25d4

  • SSDEEP

    1536:IR6L5wdgkCVFIu+yVv8oHzwpalG2DpDKpL+msuHQQ/C3C+Mb+KR0Nc8QsJq39:eDn69HccG2DpGRwQq3C+e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/exec

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WindowsUpdater.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections