Overview

overview

10

Static

static

10

4eb4e6be80...19.exe

windows7-x64

1

4eb4e6be80...19.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4eb4e6be80e65225b2eef4d5bd0c08bad7570c2717576efb9b62234d22207f19

  • Size

    6.2MB

  • MD5

    63eb4b6fe23fd20a0303ddb0c9bc8105

  • SHA1

    ff22760cce4652968c9bdba7775b4852d84fce1a

  • SHA256

    4eb4e6be80e65225b2eef4d5bd0c08bad7570c2717576efb9b62234d22207f19

  • SHA512

    949cc32179e17a5bf0d4667cd3d3e027d13d25540cb7f6755fce8b88222ec695f5d83bc52a3be39883532eecbb9586f5f0c10f803195df5cace80bffe66b3677

  • SSDEEP

    12288:C0o+Oz4nFQIavHK3KFzIXQGATT4I1dXY+OvhHKfKXzCsAG+5k4y1dXYnOv:Cxz4FvMd4I1dLOvhHey1dMOv

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.40.128:1234

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4eb4e6be80e65225b2eef4d5bd0c08bad7570c2717576efb9b62234d22207f19
    .exe windows:4 windows x86 arch:x86

    dcdf4598e1e147993cf79b9e8398d1b3


    Headers

    Imports

    Sections