Overview

overview

10

Static

static

10

489fa85c84...86.exe

windows7-x64

10

489fa85c84...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    489fa85c8451aaa5e7340e0290a0dcaacb14adc53392dc64558012070f851e86

  • Size

    2.5MB

  • MD5

    51017e741b47bdc1216fd00460a771a5

  • SHA1

    635e18367a1513e7f2b3cdc496de489c08b9dbe2

  • SHA256

    489fa85c8451aaa5e7340e0290a0dcaacb14adc53392dc64558012070f851e86

  • SHA512

    fab35c82b42ebe7c2d381212a286ceb2e92bb52ec5409e554adeabf1a93adbac9d9423b21a0b764fb3830dac82a115f852b6d759d05431d95de3c48d76bc1d44

  • SSDEEP

    49152:kK883MoXnFv3dcj7q5LsLp3CceMuczXrd83MoXnFv3dcj7q5LsLp3CceMuczaRO:kK88HXnl3dcj7q5KpyceMuczXx8HXnlq

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.185.59.39:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 489fa85c8451aaa5e7340e0290a0dcaacb14adc53392dc64558012070f851e86
    .exe windows:4 windows x86

    c1e5e771cea27af1a9becb5c3d6f84ba


    Headers

    Imports

    Sections