Overview

overview

10

Static

static

10

2980-0-0x0...ry.exe

windows7-x64

1

2980-0-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2980-0-0x0000000140000000-0x0000000140005000-memory.dmp

  • Size

    20KB

  • MD5

    db6723777f1ea37f31f6cd47c35ef962

  • SHA1

    4f9a8021adec114ea2b2f47c4c6aebf845d4be78

  • SHA256

    62e107fdc4d16222664ffe68f1c00fff3538865dc68f0214396ad79495892880

  • SHA512

    d04312db2c3aa2bfbac67bc0f94e27d6eeb7aa7484e11cf7b647f9e27104b8e127b9e58f4044d58bc9e2df1218f7fd3b0f03e92e4b721f72cf7cff543e1d5e59

  • SSDEEP

    24:eFGStrJ9u0/6tBnZdkBQAVv1YRYKLqUeNDMSCvOXpmB:is0ERkBQYqRY0SD9C2kB

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

85.239.238.79:1235

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2980-0-0x0000000140000000-0x0000000140005000-memory.dmp
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections