Overview

overview

10

Static

static

10

37bfb630a3...ed.exe

windows7-x64

10

37bfb630a3...ed.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    37bfb630a3181adf4a86ebe3bf71efed

  • Size

    1.6MB

  • MD5

    37bfb630a3181adf4a86ebe3bf71efed

  • SHA1

    0d29b771350b5842ccfb5c0cf9bccf32aac6c83b

  • SHA256

    8adfa6e2c1e730c62c4fa700ea5a2cbb35ba9bae948db7011933e9bb451be01d

  • SHA512

    689d2404b8efec002157efbbafd8390699e75d0fa57b3dc79ba98cd0787a4d7b673a4310cb7574edd666e4467cd244537ecf7086d6d549ca9a1d7f34bf7875f9

  • SSDEEP

    24576:w2EPMeu/dVFM2vfVeWDNDtKryInfbBdt633RxoTUa8ny+QUzEgc2d:LUbu/1fVX3KyInfG33nhhIid

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.17:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 37bfb630a3181adf4a86ebe3bf71efed
    .exe windows:4 windows x64 arch:x64

    015c6cfe615d839fa3dadcd6c55887d2


    Headers

    Imports

    Sections