Overview

overview

10

Static

static

10

e5daf925c8...c7.exe

windows7-x64

10

e5daf925c8...c7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e5daf925c8aa99984d6f489e6eb12caea556f4f87a9b998c0bccf4273df7f3c7

  • Size

    124KB

  • MD5

    fe73a4f936ed9595fb5cdfdbfaac8f96

  • SHA1

    4ff74e9e718c3040e462299efef1c29c7ab2cdb7

  • SHA256

    e5daf925c8aa99984d6f489e6eb12caea556f4f87a9b998c0bccf4273df7f3c7

  • SHA512

    ffd025e45520489e1289086ce92e68632189b5a494822df501e7ae9adfc5eee726cdeccf128af3ec8b6ca524bcd193c87528703f41733787239aa36b41988c07

  • SSDEEP

    1536:Ez/pwymP+mfVNzeNLwnARgzPO3+ed2TyeIhaMzPzhUvMWHnsX9NJUAkbI9dZfO1N:Ez/lG7VYNxwGhcJIha2NHk24p

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.138.130:8899

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5daf925c8aa99984d6f489e6eb12caea556f4f87a9b998c0bccf4273df7f3c7
    .exe windows:4 windows x64

    4144b4faf65604a977e926d2625581c7


    Headers

    Imports

    Sections