Overview

overview

10

Static

static

10

2024-01-11...ry.exe

windows7-x64

9

2024-01-11...ry.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-11_5f4e5b664b8010ff01fa85f6c700d05b_cobalt-strike_wannacry

  • Size

    107KB

  • MD5

    5f4e5b664b8010ff01fa85f6c700d05b

  • SHA1

    d559c7017abb49e2822b841e976f265b5bc9356b

  • SHA256

    1fba385f94415699c6f5fc24c4aadc757b01d69c2defafd33da9681c3d38ec39

  • SHA512

    e4c5edab70fcfc6fd86d097221f73f33245fe971093ef15fdc40153672da6eb683d3e1385563eb1ef6878bccb0f6f1184b673ba9234d60684b6193d9bb01b376

  • SSDEEP

    3072:XEkqdQ6bIR7BB34jzQSF8JBCJkCHM3OtYPUvoXbe7h:mhY7BowJB+HbtwLed

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.101:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-11_5f4e5b664b8010ff01fa85f6c700d05b_cobalt-strike_wannacry
    .exe windows:6 windows x86 arch:x86

    084e4343cd77f4574225316e71f17d44


    Headers

    Imports

    Sections