Overview

overview

10

Static

static

10

proinstall.exe

windows7-x64

1

proinstall.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    proinstall.exe

  • Size

    72KB

  • MD5

    3aac837724a78d7aa51b433c9096e701

  • SHA1

    f099eb8f7ffae410dbf07440670b6bc77ed93e77

  • SHA256

    f3e19753efb264de380b5174ff8f3c67e309208cb9a98c9e930f1a8a8da54818

  • SHA512

    cac351c5e4db3da2122be81b06a85eaef76699d9fcdf067b84cf8cf046e3909a9136b9d59174a30f9467f97fab08fc023a1b5af4413464e2174ad4902d2b6722

  • SSDEEP

    1536:InL8OIRykcomHXCdimcvbml+vtmjl412YcMb+KR0Nc8QsJq39:4SskcoEXCdim3l+iW1We0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.105.0.147:9090

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • proinstall.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections