Overview

overview

10

Static

static

10

rundll64.exe

windows7-x64

10

rundll64.exe

windows10-2004-x64

10

Resubmissions

11/12/2023, 12:44

231211-pym9dagcc2 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rundll64.exe

  • Size

    72KB

  • MD5

    f682862c3c888c7dcaf9d61aefe26675

  • SHA1

    8d4fde865c17381cbe817030f9416a43af838776

  • SHA256

    9d319119f6fd09a374a291abc3bed9ac99a01633f651f1b388c5d7454bc51b22

  • SHA512

    1719094940b6410722e043b5935f67c890b93a977016c829f9cb3715ac2e3c364239a74921500f49d4e002b01f3a20eed142cd85ab93f6d38b973b5d4d57d982

  • SSDEEP

    1536:I40Oasqt66niokIaUIeZAzf0ATCgJ3s6QAtLFMb+KR0Nc8QsJq39:DGxkp3eZAznJKEe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp_dns

C2

94.156.64.100:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rundll64.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections