Overview

overview

10

Static

static

10

syncbreeze...it.exe

windows7-x64

10

syncbreeze...it.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    syncbreeze_exploit.exe

  • Size

    230KB

  • MD5

    fe02cfb52f083efb32b90217da1fab84

  • SHA1

    93b11672d5705cb9388251968bd4b51530dbd6f6

  • SHA256

    d71ff13067d68bc39db2496aca2b9ba1186af7aef7333967235b2188a921ae0d

  • SHA512

    abd2002d68da06a510b3f660d2b9fbfd067146edd456d74aa28bab3da498c48a5541a8b71305b8d5073e1d8162ef8659105210126921708ef7cc223926661634

  • SSDEEP

    3072:vD+AfrNgcWp/mwJylxso6puHTEgvXh4VzhstCimiRk:7HfrNgZp/1Uco6puQWXh4VzaXu

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.45.187:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • syncbreeze_exploit.exe
    .exe windows:4 windows x86

    f7f0aa9ee22453a630266400f9590b85


    Headers

    Imports

    Sections