Overview

overview

10

Static

static

10

878563b524...9d.exe

windows7-x64

10

878563b524...9d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    878563b52414931f96b282a9a31b7f9d

  • Size

    67KB

  • MD5

    878563b52414931f96b282a9a31b7f9d

  • SHA1

    dce483a23721433def0683037eb08cc027f64dbd

  • SHA256

    7915eba6894046097ae5a5570f7fd34ff7310b9ab47f38647fba1f76daa0b5ef

  • SHA512

    1b7283f0c89958489b5f5af49759452dfb8142e5e961c7e26057bfa6e0d9ac710174b2d0e6b0ccb105441d8d361588a7499fbdcb80ae5a6a1524ae833853c823

  • SSDEEP

    1536:VawnnuNFKml8WDyy1ogRefYMJUEbooPRrKKRl1P3:VcNFKm2WDymRefVJltZrpRl1P3

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.1:31337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 878563b52414931f96b282a9a31b7f9d
    .exe windows:5 windows x86 arch:x86

    419c3fe8c1eefea9336b96f74f0951dd


    Headers

    Imports

    Sections