Overview

overview

10

Static

static

10

6457d1158e...19.exe

windows7-x64

10

6457d1158e...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6457d1158ead2e2a3b00e53e6e1f8819

  • Size

    97KB

  • MD5

    6457d1158ead2e2a3b00e53e6e1f8819

  • SHA1

    7d1706b686f3353854e448eedc530b463157dd92

  • SHA256

    3358536b67259eecd39ea7c7e17b2c7b83731ab87f89171837e863e2a2ecce53

  • SHA512

    800e1c2476f09e214b8ad67cf3ae4aa8b5ba00efb7d9de5836b25accaf257b32781a3265e074a8c77ae38ab19e4a3cccec9904a90f6eec5a8f86f49b59fc8628

  • SSDEEP

    768:GyRO6QrbSNNUrgYuMrj6btk2TO1v5KyRkXnNgh+yp3Y27ES0EmTu4aVd907ca1/D:PYbSNTYz/W6vH+ypjSaRQBNvujtQCiV

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.30:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6457d1158ead2e2a3b00e53e6e1f8819
    .exe windows:4 windows x86 arch:x86

    3baf5198a5c82b57436352743d8c8225


    Headers

    Imports

    Sections