Overview

overview

10

Static

static

10

52eb9d50db...47.exe

windows7-x64

10

52eb9d50db...47.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    52eb9d50db1918cfbeb50f451f5fa347

  • Size

    9KB

  • MD5

    52eb9d50db1918cfbeb50f451f5fa347

  • SHA1

    e2d18bac100ba79cb7263b1cb65f4cdf2a59ae35

  • SHA256

    50a063fd86dee22836e740b61afe79242a4cc9507dac7715d1069b46827b4076

  • SHA512

    2a03e7387bd212c0d4ad895084c7b423cbd66471fce46820229b64f89a863679f93dcdcce72e777b836fbc3626220ef6d802d5a1598d1817bd1a5c7e3c7ca947

  • SSDEEP

    192:pMUjnGWinQbjO6jyk5Cjy7E5pz6HJoZZ+s:pMQnQnijDmV+7CT+s

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.10:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52eb9d50db1918cfbeb50f451f5fa347
    .exe windows:6 windows x86 arch:x86

    f42abe290ec30f10b46cd4003487c160


    Headers

    Imports

    Sections