Overview

overview

10

Static

static

10

wisnu.exe

windows7-x64

10

wisnu.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    wisnu.exe

  • Size

    72KB

  • MD5

    9e461780474471ab5ed5550e64d31eb3

  • SHA1

    09df97e4935f1f2ab90c5971a51eed4bfc9d971b

  • SHA256

    32c52e7f0a04a265231e66266993a66f51e614340c7c375391905f088cd1476a

  • SHA512

    cef14eb9e96bba3b55644317246d3e6a649ba5b59b996726e1b2da90571af274e34bb52b13d11c43f87d25a89eb23a77e7a2484336c07a9a19126ec9ee14e6d5

  • SSDEEP

    1536:IEO2Jv/kKemY/wi3B23xQ4zS5i1WW27v0QMb+KR0Nc8QsJq39:xZvN5Y/ZJXubCMQe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

103.127.132.100:3322

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • wisnu.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections