Overview

overview

10

Static

static

10

141daf0590...9a.exe

windows7-x64

10

141daf0590...9a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    141daf0590cad8e84813a2abc52f4c4e09f0310aaa3ef35523d8efdcf638b69a

  • Size

    4.2MB

  • MD5

    96b4fd7b3fa506cc6fab6695e06ec84d

  • SHA1

    660a9dbe7546b42e9edff45284aad5c8675c3525

  • SHA256

    141daf0590cad8e84813a2abc52f4c4e09f0310aaa3ef35523d8efdcf638b69a

  • SHA512

    9544263ab8762392285a2703ed62004acea470e4724cf1518bbb93996e3a12e81b194d281288655444acd65041d532df09c4a1f1e7123247a92cbd7bd5f2deb9

  • SSDEEP

    98304:OvkRrMrP0uHWsOAI2uWnWV86bD98hj4i1UX1:pSRHvOHX3p8hsCU

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

61.139.65.142:64467

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 141daf0590cad8e84813a2abc52f4c4e09f0310aaa3ef35523d8efdcf638b69a
    .exe windows:5 windows x86

    4d8dd026b2129d1c67998644d6b39021


    Headers

    Imports

    Exports

    Sections