Overview

overview

10

Static

static

10

7f3d649fd2...d9.exe

windows7-x64

10

7f3d649fd2...d9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f3d649fd2cd64b6f3738a39d7e0c8ae0e36496f54ab1c311ede9c2fb18807d9

  • Size

    324KB

  • MD5

    237bf059f66b2d4b8fbbbba757c559a6

  • SHA1

    8c395269487a8a657c711593bcfc63935cfcb49a

  • SHA256

    7f3d649fd2cd64b6f3738a39d7e0c8ae0e36496f54ab1c311ede9c2fb18807d9

  • SHA512

    57534b93afc6d0e3d81ecd7926147c172e21a93e42538d81fac857104649169dd820e5d5b994b5a2251549abd07de12369f322b91d181014a54da75df9df76ea

  • SSDEEP

    6144:zGza7ALXvWwGXiAPdS7BhJC09/aOud6WiLmAiaIFsQva8zseNs8C:zG+n9S6E7XQ0oNLt3RFDvXJC

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://124.222.103.13:901/rpc

Attributes
  • headers Host: outlook.live.com Accept: */* User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f3d649fd2cd64b6f3738a39d7e0c8ae0e36496f54ab1c311ede9c2fb18807d9
    .exe windows:4 windows x64 arch:x64

    01c49520c2707ce7805e636a0754e038


    Headers

    Imports

    Sections