Overview

overview

10

Static

static

10

784d85d159...ed.exe

windows7-x64

3

784d85d159...ed.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    784d85d159cc8c45830843c135205a478e7d7b9236805c4585a126f76e97e9ed

  • Size

    10KB

  • MD5

    44ce244d8ed8c9c8126da5fdc9a8bb8e

  • SHA1

    3a1c94463e797d52ee91148c5b46a295738f44b3

  • SHA256

    784d85d159cc8c45830843c135205a478e7d7b9236805c4585a126f76e97e9ed

  • SHA512

    6487c5deb8a3ce75bda792f277943be7b71cccbff13d1a1fe0bb02f52dbee3a07579ecb4721fcb8509969ad3b6a9a6eec7b102b0be57e2e44b1a59ef7b00a20c

  • SSDEEP

    192:Xo3/FKtjbHjbVRWJbbjOe5ZMxQmJ97E5pz6zMI:XoPE1bvuJPjFmu697b

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 784d85d159cc8c45830843c135205a478e7d7b9236805c4585a126f76e97e9ed
    .exe windows:6 windows x86

    2893194978ce2a3757c496bd06e277e0


    Headers

    Imports

    Sections