Overview

overview

10

Static

static

10

5fdf3c5617...17.exe

windows7-x64

10

5fdf3c5617...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fdf3c5617709b6090a99c8ef21353eb6d926bd13bbe62ee4fae19ec6cc07417

  • Size

    41KB

  • MD5

    0d63022a1398a7b435bf47944f7eab23

  • SHA1

    b94598227a01ad4f8a9a0f54538ef07e0d6be708

  • SHA256

    5fdf3c5617709b6090a99c8ef21353eb6d926bd13bbe62ee4fae19ec6cc07417

  • SHA512

    c845a1e7f3922d783acc3d508434a7c0677579b30e917513c205fc175e54cff33db69bf1e53946b61b0309a7319261d2410b1e308924728bdf65c818efdff8cf

  • SSDEEP

    384:ineLLXstDfq5zlv7jk7oC2NFaHJDj8/IpVwPhCRJD7DzByD2nZ:D+DyRlv7jk7okpU/IpEh0D7DzByDQ

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://172.20.10.3:80/mZTA

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fdf3c5617709b6090a99c8ef21353eb6d926bd13bbe62ee4fae19ec6cc07417
    .exe windows:6 windows x86

    c712baae7a9ca3bcd141e501c5e871ff


    Headers

    Imports

    Sections