Overview

overview

10

Static

static

10

25801b86c6...30.exe

windows7-x64

10

25801b86c6...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    25801b86c6d2f41ea26db2b6508568ac95e0c568cd7f54af74676181e2564a30.zip

  • Size

    3KB

  • MD5

    a897fc2c06387dda83722f5c2f1edfe2

  • SHA1

    d5368bc854f0d8b5f08bad33fd962efab665be2e

  • SHA256

    35767fb35f82432ce38ea71f08e8dd9ea8b0d9c550d39c52e3e699167ae5dd20

  • SHA512

    0ed8865e7d8973aa45da0a7a5aa407beb3733dc318f4b95fbbcb2aa051b4667ea9fdebcb100d114d3bd230480248798c750604538889b0374e414d12755d87de

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

104.244.78.10:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25801b86c6d2f41ea26db2b6508568ac95e0c568cd7f54af74676181e2564a30.zip
    .zip

    Password: infected

  • 25801b86c6d2f41ea26db2b6508568ac95e0c568cd7f54af74676181e2564a30.exe
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections