Overview

overview

10

Static

static

10

02022024_1...xe.exe

windows7-x64

10

02022024_1...xe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02022024_1552_pdf_exe.bin

  • Size

    72KB

  • MD5

    133d2ac63943e36a4fac9f811323b5da

  • SHA1

    b7d9729f4083d9ecf10b1fe27536958a4d8d4e3e

  • SHA256

    3e087ba4f93b64eed7ba678ac92e712ba13e8ee9aa0e591109d9eb92a8f61b3b

  • SHA512

    06b04cec49646fcb385fe95aa2cabaade4f9c4632f3f245a89b1a157fe67d7182bf2d5d8409e45b1c8e7cad564fc77735cc419835fbad588499153f6469888a5

  • SSDEEP

    1536:I5U2puzgJWEi4vccsn/fgH+3veGQMb+KR0Nc8QsJq39:6UKuzgJO4Ub/Ye3veGQe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

79.110.48.22:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02022024_1552_pdf_exe.bin
    .exe windows:4 windows x86 arch:x86

    Password: infected

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections