Overview

overview

10

Static

static

10

ddf020e700...dc.exe

windows7-x64

ddf020e700...dc.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddf020e700eb8bedc0fa8d185e8b3c8f8bfb61136a0208fa0472309675c944dc

  • Size

    2.5MB

  • MD5

    d5f38482dc450b21ab21e8c22fdd2889

  • SHA1

    61ac656bcfbd0a6b81a5dcbe2985be0a4dd15c3c

  • SHA256

    ddf020e700eb8bedc0fa8d185e8b3c8f8bfb61136a0208fa0472309675c944dc

  • SHA512

    e229c58a0f63f4b2603ce958f08bb59016369581b66239929498f0c7c8698a219df60f53aa1244c86a44061b1751669e2605f17d8c4b465fd3e7e563cb7163f3

  • SSDEEP

    24576:GpOQ3tQ4jNWweGRlTJcx2hekmUMg2IpeqUGkQxHuyuViNJE6x+rKnibiF1r:GptRpWweA9Q2MW2IpkGFxpMqB+WF1r

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_ipv6_tcp

C2

[fe80::5efe:7f00:1]:123

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • ddf020e700eb8bedc0fa8d185e8b3c8f8bfb61136a0208fa0472309675c944dc
    .exe windows:4 windows x64 arch:x64

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections