Overview

overview

10

Static

static

10

financials.exe

windows7-x64

10

financials.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    financials.exe

  • Size

    72KB

  • MD5

    26d923143b784afd252334ba625c5523

  • SHA1

    b1fcb524ba101378b2d63b638279a9c68b11541c

  • SHA256

    df2eea0dbe1ac4a8fb481d0a626dc7cf85994c202e8eae66684144f931a39499

  • SHA512

    04c5b930a4e88055614d2378a2bdece648d03049fcf183bb29801cfcb7da3a8bc25733c77dc0ccc14d0c5171b13bfdd6b5b46acb05c4cb472c08ba587a49bd2d

  • SSDEEP

    1536:IswaZ3uJesjCcMypA+2rsAIgwqrnPAQlMb+KR0Nc8QsJq39:rzwzOdyOXIpqrPTe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

45.79.56.153:9999

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • financials.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections