Overview

overview

10

Static

static

10

2ea556c390...5a.exe

windows7-x64

10

2ea556c390...5a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ea556c3906f27a7ba2d704d4133108f16cf3997650d95a50cbd1725a6b82a5a.exe.zip

  • Size

    44KB

  • MD5

    eabadc1403e007e11ba4ff55c8593014

  • SHA1

    2b267f3b10921ec585c19fbc338da0304686f8ff

  • SHA256

    448140f08bcd329426d6b4577c64122874b5acf7de15e34acc8954289e77efa5

  • SHA512

    19eacd8fa8befb47434eedbdb24f5d6d257dc9cc27742008573b9b09328379120ff281e6ef9e23c3731897d21f109e38ab6f91a6d7740f6feb9b5946def85af1

  • SSDEEP

    768:e4wdGIen3seiAb/4czOP5sst5jMjEybNV91fBuqEvCn6AABddJg7l70KGJ:r2GIcseBb/c5tjMjEyj91fBuSABoex

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

139.59.113.146:13337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ea556c3906f27a7ba2d704d4133108f16cf3997650d95a50cbd1725a6b82a5a.exe.zip
    .zip

    Password: infected

  • 2ea556c3906f27a7ba2d704d4133108f16cf3997650d95a50cbd1725a6b82a5a.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections