Overview

overview

10

Static

static

10

b6bd3e6f8d...aa.exe

windows7-x64

10

b6bd3e6f8d...aa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6bd3e6f8d4b652c173d19a6df2d10aa

  • Size

    422KB

  • MD5

    b6bd3e6f8d4b652c173d19a6df2d10aa

  • SHA1

    fe1bec75d066e5943efe1efd3e7caa9bd70b0480

  • SHA256

    96543dc14060469e4005ce33187ff1a580388bcad04f2e680b4afa9427f0d270

  • SHA512

    ef2ba97990463de43d339037bacbe0d4a4af7af63d7fb0fc8359b1182792814b885fb015af221845ca814991659f7e431951406af1dd70758a336e89bbd95228

  • SSDEEP

    6144:SK0chDp7WDzXmbtOI5EWTFjobOSso423EW+RgZ3xReJKQtH1d7JDIb0Q4:SKNhNsaZ8mFjobOSso4GL+RdF7JDo0f

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://edfd09fd3e9e.ngrok.io:80/VTlF

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6bd3e6f8d4b652c173d19a6df2d10aa
    .exe windows:6 windows x86 arch:x86

    614018410ac57c4534578f4cd62efe12


    Headers

    Imports

    Sections