Overview

overview

10

Static

static

10

138b98a1d5...ec.exe

windows7-x64

10

138b98a1d5...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    138b98a1d5beea49ddce6ce97946d159fe56944d77905d0daa3f1f444b0a50ec

  • Size

    10KB

  • MD5

    2207231f0e517810251cfd1cce488df5

  • SHA1

    044aaf7c357c4358ef5a7bcc43e7707ce6ea7dcd

  • SHA256

    138b98a1d5beea49ddce6ce97946d159fe56944d77905d0daa3f1f444b0a50ec

  • SHA512

    c71bbfcb577a74b06b353c60b60168ad7fa8a9be1d5d2ac352709d42b006c6867160eb3f5471a2e69a33d4061ac09fb203688183e4c2a8e9740c8a46f1fbdeca

  • SSDEEP

    192:D5UjnUg5vWJrzjOXH5ZMdkZhb7E5pz6fM4uc:D5Qnf4JXj8mdA7/u

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 138b98a1d5beea49ddce6ce97946d159fe56944d77905d0daa3f1f444b0a50ec
    .exe windows:6 windows x86

    0fe64c635c0beb1e0b389b476b920ca4


    Headers

    Imports

    Sections