Overview

overview

10

Static

static

10

699a5e67fc...2d.exe

windows7-x64

10

699a5e67fc...2d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    699a5e67fcd18d537878cab5f7315ee87c433c3a27e366a7e5afbba5021d6f2d

  • Size

    6.2MB

  • MD5

    99c1378f7f0f573cd9e47db53826ff11

  • SHA1

    6784da2a45c5eff8e76723b6def55b3dbb0525fb

  • SHA256

    699a5e67fcd18d537878cab5f7315ee87c433c3a27e366a7e5afbba5021d6f2d

  • SHA512

    aa4271f27602905372ad2b965c4d8dfcee85ab9811ed4d25d847301a517c6b57a0e807e92572ba6d366d269b043788256921cf6ad77a73722b1cc75180759cd5

  • SSDEEP

    12288:40o+Oz4nFBIavHK3KFzIXQGATT4I1dXY+OviSHKfKXzCsAG+5k4y1dXYnOv:4xz4FqMd4I1dLOvbHey1dMOv

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.40.128:1234

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 699a5e67fcd18d537878cab5f7315ee87c433c3a27e366a7e5afbba5021d6f2d
    .exe windows:4 windows x86 arch:x86

    dcdf4598e1e147993cf79b9e8398d1b3


    Headers

    Imports

    Sections