Overview

overview

10

Static

static

10

d2aaa0e1c5...bf.exe

windows7-x64

10

d2aaa0e1c5...bf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2aaa0e1c5d4ed226166c373d03e0cbf

  • Size

    4.1MB

  • MD5

    d2aaa0e1c5d4ed226166c373d03e0cbf

  • SHA1

    051e7cc9ea875c7f625d2d813d7d079d7cf6c5fb

  • SHA256

    135c2307417d3def21754a30438ce55e095ed33825271ae3127fddd6bc330f13

  • SHA512

    6fc270d2243b3d01d7c8ffcb5aa5553593dcedb3a17ec197e746791b2cb8de438b6545ae6d2bbee0d02adbdf4209bb6b5288c359de5db9d3c005f71c2695d7e1

  • SSDEEP

    98304:zaEFJSteHc4iAjtw+6NHdq3aA4i5iwa36HKb9:u4JStD4iAjIHdunaqQ

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.2.160:7823

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2aaa0e1c5d4ed226166c373d03e0cbf
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections