Overview

overview

10

Static

static

10

566dfc6065...a3.exe

windows7-x64

10

566dfc6065...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    566dfc60652aadb8a4b8698d0f74adf9baf444ad7aa243a0df16dae8d5c8e9a3

  • Size

    97KB

  • MD5

    f8241b2a9d0f60ef42edd535033169d1

  • SHA1

    65e99cee80f8c10fc5d13d93796895ba3ed31d83

  • SHA256

    566dfc60652aadb8a4b8698d0f74adf9baf444ad7aa243a0df16dae8d5c8e9a3

  • SHA512

    57460dc1eff216634618544fef132b86b1060a10bee15fcc66100f04b421f5ce3672bb3583f8a9dfd2e91707c5888a0edcce149777fdcffa184c9f246b086d89

  • SSDEEP

    3072:ohP9zKgeT9mNMKi+n7oI3pKLRBw0TTH95w:GF+9+MKw5Td5w

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://118.31.77.76:443/KOOs

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 566dfc60652aadb8a4b8698d0f74adf9baf444ad7aa243a0df16dae8d5c8e9a3
    .exe windows x86

    08be38cc314235986059549404e7f876


    Headers

    Imports

    Sections