Overview

overview

10

Static

static

10

8c9890f978...9c.exe

windows7-x64

3

8c9890f978...9c.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c9890f978e2903bb8e136c3733a489c

  • Size

    81KB

  • MD5

    8c9890f978e2903bb8e136c3733a489c

  • SHA1

    c04dd884b54c427b0ae77327fb14c363ad3f5ccd

  • SHA256

    7ad60eb82e0c6b0355ff79d23078b265a5d7fd46e9704474bbfba72f04051427

  • SHA512

    89700cb8b3281594e650b6d0babc5e4b7614440ac3e3e6ea47b02fbc0c90950bd918866d5c4b8f9f751f33d474079daf3acccfbf404cc8c26798fe69af70a237

  • SSDEEP

    768:es4cCHIn/V+oic1K9LW36xtL9gRQEDqAnf9/OZU9qZU9SnUgc:ebc+I8LW7Rv9OpUgc

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

172.16.1.105:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c9890f978e2903bb8e136c3733a489c
    .exe windows:5 windows x86 arch:x86

    8221c55ede60299827f0af1827a82c27


    Headers

    Imports

    Sections