Overview

overview

10

Static

static

10

Powerfull.exe

windows7-x64

10

Powerfull.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Powerfull.exe

  • Size

    1.9MB

  • MD5

    c5e7170528736ea923bb0f9790eef39c

  • SHA1

    9855208ce018f89873c6274e224fbb69b0163447

  • SHA256

    6b2ccb6a2460e2291def6f75b9a8536ad4ab370f91d64090ede5e86e1621fe0d

  • SHA512

    b71a1c7a65b169b1c6216e5c796d4ac0241af0291ba8e74287d41897955e8befc8bc32e5787f4c243fc0b91b107270ee943fdc0ffeec947bcd60a08a5ce3d716

  • SSDEEP

    49152:mL2oq47rfzUw8WLosyeiqdShvMoBYXjbtWa3MZ:Q1bxdaMo2MZ

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

173.212.219.45:5656

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Powerfull.exe
    .exe windows x64

    e0e0c99ae34c4b8b156971d78cc79573


    Headers

    Imports

    Sections