Overview

overview

10

Static

static

10

fd391add38...76.exe

windows7-x64

1

fd391add38...76.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd391add3844bcf3cda922cd363130c9772cf390925ed88582dcdf0d50ed8f76

  • Size

    10KB

  • MD5

    d3bb8e90d0b3c6f984114f5057c34a57

  • SHA1

    e5b495e6e33f35c6acc23ffa5adfc6a83b9be60e

  • SHA256

    fd391add3844bcf3cda922cd363130c9772cf390925ed88582dcdf0d50ed8f76

  • SHA512

    66cd9d67a8bb591dbe7bd2de7c4ea74062b6ac2584f7568cc06b5df6cd7df040bf88d1dec8f3085b8d585e0d65fa7693cecc1b95321c863a03e4309008ad28e9

  • SSDEEP

    192:hPuj7Wr2zQTjOB1PdViQa7E5pz6HJoZg2IL:F+7acKjadVra7CO2

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://2.56.240.144:80/kLWN

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; BOIE8;ENUS)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd391add3844bcf3cda922cd363130c9772cf390925ed88582dcdf0d50ed8f76
    .exe windows:6 windows x86

    7c8b7bbcddc96d64a76c687c6f591ee4


    Headers

    Imports

    Sections