Overview

overview

10

Static

static

10

402fe0825f...84.exe

windows7-x64

10

402fe0825f...84.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    402fe0825f456abfa48ccb2438fa9f84

  • Size

    1.3MB

  • MD5

    402fe0825f456abfa48ccb2438fa9f84

  • SHA1

    72feeda311601ecb991e1eb5a670cd1529ef9e35

  • SHA256

    0ec5ac5f84dea3e0626d36e7271526891ab6b162515ca203327896a7e9513bcf

  • SHA512

    a9b3d70d117c558bf6c6f6f542995a194b029fb0f09f08c3b6b6718233bf04c5fa054604e06ee49c2d027e013532682a8e680982ae1335c414331a51f49ef130

  • SSDEEP

    24576:WIjnRgBk4pXTyy5jzx/1Ehi9TUs0l2QL+9le8ceAwmabs/fkB4W:WonR6k4pmy5j9/1EhiWs0l2QLCllAjaz

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.13:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 402fe0825f456abfa48ccb2438fa9f84
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections