Overview

overview

10

Static

static

10

248ab97f60...4e.exe

windows7-x64

10

248ab97f60...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    248ab97f6060ce59b27c2437ed575f719efed8005ebe7dea46f08c8649944b4e

  • Size

    61KB

  • MD5

    770922f17fa28da9745662428d133e45

  • SHA1

    7d584e85c24062c0de21739bf47d69c309662a70

  • SHA256

    248ab97f6060ce59b27c2437ed575f719efed8005ebe7dea46f08c8649944b4e

  • SHA512

    b15aac99fbc5bf646d08c1e4ef8cdf0289246f0380f372862ae588cffa4be0616fadca558956c36378bae91cdf5dd0af09765ac258ce92774510dd4f69e8c174

  • SSDEEP

    384:fvBdKuwQeTw+NyJDaAxcItDMKbmq/4HYN6SXXHLZCgQfBX4LjEkP89Z7L:HnKnwwy5RtpmcDXXVCxBoLjBP89

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.161.211.23:2333

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 248ab97f6060ce59b27c2437ed575f719efed8005ebe7dea46f08c8649944b4e
    .exe windows:6 windows x64 arch:x64

    163ce2df9024e88008cef6545abde321


    Headers

    Imports

    Sections