Overview

overview

10

Static

static

10

adb5379a6e...c1.exe

windows7-x64

10

adb5379a6e...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    adb5379a6e7909e2380a29f306eb5dc1

  • Size

    90KB

  • MD5

    adb5379a6e7909e2380a29f306eb5dc1

  • SHA1

    b250cec7c1462f972d10772d199cd9ab4082cda5

  • SHA256

    3e9bf6ea0933dff4f6d8c7636f9b5431a4254cc91cdc8c44fdf2c17015214da4

  • SHA512

    f0a721a9f25e16336005cf873eba1795bc43d8e1504002fee1f3eefb5b860175786fd6d6e025f0481b9b378a66339f8a0d5b175043c4e9e2027ca0adebcdf645

  • SSDEEP

    1536:XDcjVohEwitwUV3fG+++++++++++++++++++++++++++++++++++++++++eJi8j:IPtZG++++++++++++++++++++++++++z

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.21:443/INITM

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • adb5379a6e7909e2380a29f306eb5dc1
    .exe windows:4 windows x86 arch:x86

    6eb65e730c6fed85052b9d82cc5b5507


    Headers

    Imports

    Sections