Overview

overview

10

Static

static

10

588ec34ebe...40.exe

windows7-x64

10

588ec34ebe...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    588ec34ebec4768d1521334e8c025a55f4a4aa5e9ad578d24fc75e08df873740

  • Size

    10KB

  • MD5

    4c6ae30f8ed22d5136f4ee05c649f16e

  • SHA1

    7d1ab69af297bd8e7d29a48452fda4db4bf99519

  • SHA256

    588ec34ebec4768d1521334e8c025a55f4a4aa5e9ad578d24fc75e08df873740

  • SHA512

    a4723178c61de3c49b761950511a5e3c07eb810aa04bb0f6d57ccc10b506ba45c364091492979e7e9608f8bbe213dbf489ae24121a1c50eaee0d28a2deda7820

  • SSDEEP

    192:25UjnUg5vWJrzjOXEE4MLhb7E5pz6fM4uc:25Qnf4JXjs4C7/u

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 588ec34ebec4768d1521334e8c025a55f4a4aa5e9ad578d24fc75e08df873740
    .exe windows:6 windows x86

    0fe64c635c0beb1e0b389b476b920ca4


    Headers

    Imports

    Sections