Overview

overview

10

Static

static

10

ccea670b84...98.exe

windows7-x64

10

ccea670b84...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098

  • Size

    2.5MB

  • MD5

    27f075de3f2212de1e81bb9f2283cef1

  • SHA1

    db8e7e7cce12f3686803d6297ebcf380dfbc33de

  • SHA256

    ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098

  • SHA512

    ba3617f464786d48f6d559b14fa2e3d186c315e7fd3cb523d0bb1eb46b28ce2177eb58373d525242606e2f5a159d44924f4c4add339b165c4e7792757b6a6ded

  • SSDEEP

    49152:dKv83MoXnFv3dcj7q5LsLp3CceMuczXrN83MoXnFv3dcj7q5LsLp3CceMuczaRv:dKv8HXnl3dcj7q5KpyceMuczXx8HXnlT

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.24.192.211:777

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ccea670b84eabd7e0cc8ee9315ee35c606b1f5c09f4931c3c544cade22b11098
    .exe windows:4 windows x86 arch:x86

    c1e5e771cea27af1a9becb5c3d6f84ba


    Headers

    Imports

    Sections