Overview

overview

10

Static

static

10

61aca6a10a...0d.exe

windows7-x64

10

61aca6a10a...0d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    61aca6a10a2c5c8ebf7561d7e063f0b920c024bc018838011d8aabc530a2870d

  • Size

    39KB

  • MD5

    f78c1acdafdf1d075864e856b6d1897c

  • SHA1

    97fec8b75bb48d1a8bb4f912969476bd2fc84cd8

  • SHA256

    61aca6a10a2c5c8ebf7561d7e063f0b920c024bc018838011d8aabc530a2870d

  • SHA512

    f2f1dab4c98d3bd9df0f319fba81ddf0a4bee2e5bc232331d45ceadbd4b517f7ccd6030016ec26061be282c147e5e17ca40a7d34468e415ed0a399c1a61b528a

  • SSDEEP

    384:sWZRb5a2o5bL6yX5ARW1N1hwIwPhNHZikXByD215nN:b5SBL625AMfophFZ7ByDmN

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.154:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 61aca6a10a2c5c8ebf7561d7e063f0b920c024bc018838011d8aabc530a2870d
    .exe windows:6 windows x86

    8116bd57c102166978264eb752928e71


    Headers

    Imports

    Sections