Overview

overview

10

Static

static

10

423939ca77...aa.exe

windows7-x64

3

423939ca77...aa.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    423939ca7778e80b61426a70b240b9962c38cd5d2af14ed1694e8ee88711d6aa

  • Size

    10KB

  • MD5

    36fd093a6f76727821c9a2f822a3c708

  • SHA1

    491f2acb6aa51a0f00f0a115dd20dc8996e0d858

  • SHA256

    423939ca7778e80b61426a70b240b9962c38cd5d2af14ed1694e8ee88711d6aa

  • SHA512

    49c31804035adb44ac69c054633d500f305fcc51caddbb7827509f9b7081ff95ff6ab6b0b996164205945f2f6c217e5890cad01acb913e600a64a1de90466d9e

  • SSDEEP

    192:faj7stQKWJrzjOX6Y5ZMcoPb7E5pz6fM46l9:fC76iJXjLWmd7/c

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 423939ca7778e80b61426a70b240b9962c38cd5d2af14ed1694e8ee88711d6aa
    .exe windows:6 windows x86

    0fe64c635c0beb1e0b389b476b920ca4


    Headers

    Imports

    Sections