Overview

overview

10

Static

static

10

980bb55770...19.exe

windows7-x64

10

980bb55770...19.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    980bb557704f1aadbd2333adde98d62263cdbd60417abe916a6858102bbbe419

  • Size

    103KB

  • MD5

    c7c474ba0a2e93f5e6c5a855fa932bbe

  • SHA1

    6983a0b34d19530afe9c719ee542cbbd305069e7

  • SHA256

    980bb557704f1aadbd2333adde98d62263cdbd60417abe916a6858102bbbe419

  • SHA512

    a3de9fa04b109a671a499698245f2765effb4625fb8a4ceabf350fdf63f3a3fd2c33db03b6a4129f8184045faaeed03c1e18aecabe808ebe3159ab7662cfb737

  • SSDEEP

    1536:67GJI5iTnDkcXYjyqWOrtu3yUyJCb8V0U1xaQK:yQ5HkcUyqPWEM

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://39.105.217.171:8888/ZRiG

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 980bb557704f1aadbd2333adde98d62263cdbd60417abe916a6858102bbbe419
    .exe windows:4 windows x86

    4de9c2e249e2b53fab6bcce08e2a1d48


    Headers

    Imports

    Sections