Overview

overview

10

Static

static

10

0x000a0000...27.exe

windows7-x64

10

0x000a0000...27.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000a0000000008ab-27.dat

  • Size

    72KB

  • MD5

    145788636ed26bce28ca5d65cd05d138

  • SHA1

    2a3f73411575e37739ea26d14ecefe56cd4023be

  • SHA256

    c9a743c0eea1cc772d4f5c7f4a4d1043f548499d41a3f54278fdc5428481de8e

  • SHA512

    dcab13530ec219fa626d7f3fa1737c032330a8f9fb59e296d47cc7e8450b2dbffe21075bb1d49edc2f44d7e1529434fc123c323e008e22693cdf298d9a07f6fa

  • SSDEEP

    1536:IGTT6NerLhbkfltpMD4BQKDPyOMb+KR0Nc8QsJq39:6NC2vQ4NPHe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

156.223.59.18:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000a0000000008ab-27.dat
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections