Overview

overview

10

Static

static

10

dea3f3624d...b2.exe

windows7-x64

10

dea3f3624d...b2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dea3f3624d7959fbecf35e401e4fbc1f745634171587f26439a01e734e94f9b2

  • Size

    60KB

  • MD5

    16bd999f3e91a212d864356255c9cbb9

  • SHA1

    2c80a26b53b745e87c07e23cca43080b56e419c6

  • SHA256

    dea3f3624d7959fbecf35e401e4fbc1f745634171587f26439a01e734e94f9b2

  • SHA512

    a7be0b2ece432c46c1c633fd1cf0ac9d1eded690b5a6c00da69bb5a342173e704a832495144e08b0859ac61d5e6e52d88889eeef68dfb8deeb718191a90d2998

  • SSDEEP

    384:PeTa9Zby/3AfHBQCItKl4FbstQH+Ifidf6gqIpxzMQfBXN/jN7dtbuP89Z7L:vPby/WAkSnqdf6spxzFBVjNxsP89

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.138.131:22222/9t8w

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; Touch)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dea3f3624d7959fbecf35e401e4fbc1f745634171587f26439a01e734e94f9b2
    .exe windows:6 windows x64

    c3035865609dd4a257db5ba76e3aa1a4


    Headers

    Imports

    Sections