Overview

overview

10

Static

static

10

48960ce281...a9.exe

windows7-x64

10

48960ce281...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48960ce2815b79af0e3e3dfd2f5ff9a9

  • Size

    9KB

  • MD5

    48960ce2815b79af0e3e3dfd2f5ff9a9

  • SHA1

    d003fba5b4b48b797401e610adf7de0f134c4a91

  • SHA256

    f1d9abddcfe62a3c51f15c21533008315bead1535cc8b7e6d03356f1177927e5

  • SHA512

    82e76c1ccbc9be4ade475ee5d7d94db82a1a5cbabb29ea138d5706c02f953f8556559a8d203e06d9a2dffe381911318b9bacf25726be64c3018d6671a0b0a87e

  • SSDEEP

    96:CmkiYYuaJsp1wI0jTcgJ1tPunuvc8/H/OSjOVRCCZvKhYkSE5pz6rJoZZLx0W0:x60jTnJL2nwTjOaGr7E5pz6rJoZZT

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.0.0.5:9090

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48960ce2815b79af0e3e3dfd2f5ff9a9
    .exe windows:6 windows x86 arch:x86

    0fe64c635c0beb1e0b389b476b920ca4


    Headers

    Imports

    Sections