Overview

overview

10

Static

static

10

msft_updat...ce.exe

windows7-x64

3

msft_updat...ce.exe

windows10-2004-x64

10

Resubmissions

17/08/2023, 16:11

230817-tm2pvacc7t 10

17/08/2023, 02:46

230817-c9sxsaeh55 10

16/08/2023, 19:00

230816-xn6a7sfb2x 10

16/08/2023, 18:55

230816-xkv13adc48 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    msft_update_service.exe

  • Size

    72KB

  • MD5

    583d30aabd2b8c64506749e65ddc2ab0

  • SHA1

    1b0b65ddc1eff145359968ebb4249326d32a7cc8

  • SHA256

    6848a23b3946c58c87ea8b30a14365e2c799cac6e5909c87a7fa5b4a716ac098

  • SHA512

    0a4515a63108dd0da25f28fba5635d8cdd9d2733bc8570f0393ed4b97cc4763cec935d38d6bb5c391d0f209708f1f8d76bc4b3f316b27644205e907bf1f4fe58

  • SSDEEP

    1536:Ib7Ts2Wj1TkvftmNZYD3GLbMBmFx8DOA55HBMb+KR0Nc8QsJq39:5NhkXtmMD30bMgMDOAHHBe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://18usc1030.sucks:443/otZOSp4-9mu7TbpM3-0Fygp0AbQWnO4BToRqr4NNT0vYelusVNuSVbVcqMSDP0VYLu_sxdo

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • msft_update_service.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections