Overview

overview

10

Static

static

10

1d5862df9c...fe.exe

windows7-x64

10

1d5862df9c...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d5862df9c22747bbf35ac4b46bd98151abc4a85b44dcc753d254b95e1da9afe

  • Size

    41KB

  • MD5

    a18a9fc49a11fd61dad7f5d0d03deca9

  • SHA1

    8f82bf85aee2bec5d4d356674d6c54d73a837f6a

  • SHA256

    1d5862df9c22747bbf35ac4b46bd98151abc4a85b44dcc753d254b95e1da9afe

  • SHA512

    9bfcc732122d272e3eb0b18f038a7b6119a6c1fbcd8866d78115d033b40bb1bff79915f80e79138bcaf59be1311983cd42429589fa07b12845d37943e3b84fdc

  • SSDEEP

    384:8fi5YOVnapDIcbbctdZkgkzop/LaxsOYoEB0vjhVisYpezkK1vuD2lh:6iiinVcbIJkzC/ec0v9PYpuFvuD

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.16.130:3333

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d5862df9c22747bbf35ac4b46bd98151abc4a85b44dcc753d254b95e1da9afe
    .exe windows:6 windows x86

    547aaeea6fc503825d3c6e7494e013e4


    Headers

    Imports

    Sections