Overview

overview

10

Static

static

10

44c89453f0...80.exe

windows7-x64

10

44c89453f0...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44c89453f06213cef6f694f5b73d0080

  • Size

    279KB

  • MD5

    44c89453f06213cef6f694f5b73d0080

  • SHA1

    6bda71bf7e9dced87cf4b3b3c3aa6ae549bc788a

  • SHA256

    bd1835597e518f83e72d086cc4dd4606a8a0cf828211eb82272deeef82a73e8b

  • SHA512

    fd9098b76d524e459ad605de71855ea10e32e598f4bf166d9a400dd07f1b5c13e62b1f1e8ba61deccbf7a67507c2a0f92c608053f88c44dd5834280f5e250e2d

  • SSDEEP

    3072:25wLR7Vzb178Mov1oMolktC/TQyJ7UwfddZmrkZcNEtu+cRw24io:GwFBhCSjG4/Fmrk1K4io

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

198.167.219.9:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44c89453f06213cef6f694f5b73d0080
    .exe windows:4 windows x64 arch:x64

    7ece732248860d057c99cefbba9397d1


    Headers

    Imports

    Sections