Overview

overview

10

Static

static

10

0b00cbbad2...42.exe

windows7-x64

10

0b00cbbad2...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b00cbbad2a21967f8860af792fbfe42

  • Size

    116KB

  • MD5

    0b00cbbad2a21967f8860af792fbfe42

  • SHA1

    0d3f5909bf32c2a65da28d37f13518646f471065

  • SHA256

    e359d2a6a629154a64b44fbe10783ce8bc9d013fa586a90e42a94856a784f0ea

  • SHA512

    0b3a9db6fd21f38411355d00bf35cf4aaf6e535f00cc7be27505ffc5d18652731e4127d27721e274313fd06bbda350c10adcbd473962d1829a529847b79cf46b

  • SSDEEP

    1536:Wll14rQcWAkN7GAlqbkfAGQGV8aMbrNyrf1w+noPvLV6eBsCXKc:WfmZWXyaiedMbrN6pnoXL1BsC

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.114:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b00cbbad2a21967f8860af792fbfe42
    .exe windows:5 windows x86 arch:x86

    08f6a1b121da8cedde2d1089d0906ed8


    Headers

    Imports

    Sections