Overview

overview

10

Static

static

10

850b20fbfc...86.exe

windows7-x64

10

850b20fbfc...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    850b20fbfc1db44692f829c2deb10b8258730cac62d4d8ac9f03614a36034486

  • Size

    39KB

  • MD5

    5b861573b7c6fc3bd647d1c5ee0e9f54

  • SHA1

    5e2124cfc33978134317ebf96e13bec6677b6232

  • SHA256

    850b20fbfc1db44692f829c2deb10b8258730cac62d4d8ac9f03614a36034486

  • SHA512

    5579cc88311d060bd02ba064a9de6bad95c6daca9e876542d3d9cedbeadff28aa788b49599a0367e8682040688847b9e6327856454d70f5150c3dd74475bed23

  • SSDEEP

    384:Qo1PJ9nY5xEdWowljp12WC08/kHPwPhNpnSvkOWByD2J5h8:LJ25xbowljnbg8uhPC4ByDr

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.234.130:6000/icon1.png

Attributes
  • headers Host: bing.com Accept: application/xml;q=0.9,image/avif,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 Cookie: token=TYGAelr7Vs8pYUEdf0pAKVf6BcqFCOPB;BIGipServerpool_9.29_5229=3314783417.22012.0000 User-Agent: Microsoft-CryptoAPI/10.0

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 850b20fbfc1db44692f829c2deb10b8258730cac62d4d8ac9f03614a36034486
    .exe windows x86

    b276147a484e123495c534ff16aaf771


    Headers

    Imports

    Sections