Overview

overview

10

Static

static

10

31c8ca034b...d8.exe

windows7-x64

10

31c8ca034b...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    31c8ca034b9a0eafac8b2217f4177620cb15a6d9e70ee4dbde9773d485c14bd8.zip

  • Size

    43KB

  • MD5

    760035e4a41ce2ece06ac24f42f4f71d

  • SHA1

    9a6389d4bdaf1251573cb7b06617b5690df048f3

  • SHA256

    e09dc825198211c92bff6646c3ac6e05a2cdd62e38733f9a92642d5b8fc4e709

  • SHA512

    491b8b7434bac3c613606e05402f7e804ad3164f692f4515f89de63129e78071f2d3a3d37dd710a38a77597ff1d31705dc070cb3f6001194740689f3caecff79

  • SSDEEP

    768:aj74jfBi70mDVnK90HqA8nyYWScs3TSY0pZiJJTeFb6T6YbXc1yYbTREqo8/VG:Q7qfMfJKWHwy+csj7eD+T6YbXc11bx/Y

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.10.162:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31c8ca034b9a0eafac8b2217f4177620cb15a6d9e70ee4dbde9773d485c14bd8.zip
    .zip

    Password: infected

  • 31c8ca034b9a0eafac8b2217f4177620cb15a6d9e70ee4dbde9773d485c14bd8
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections