Overview

overview

10

Static

static

10

81bc8b24ff...ab.exe

windows7-x64

3

81bc8b24ff...ab.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81bc8b24ffaa4cc9d618d77abb241b616033285ff7b8d915e16744247d899dab

  • Size

    272KB

  • MD5

    42c4eda2016352bf8f2f7b7771522280

  • SHA1

    68366bede4d3942329bd2291166ab412ec1fcbec

  • SHA256

    81bc8b24ffaa4cc9d618d77abb241b616033285ff7b8d915e16744247d899dab

  • SHA512

    9434528767e6fb8f010b4da13f95c52a01fa9b6cc4e2d31e67dc9948e4a8d566f1ff63d657578fee0acd104d56c575454601679940b0456bbae7e8a44545d8f7

  • SSDEEP

    3072:zUvCLFw5TadgKJwoCeayPvlaRTHiq55ZBf9p5a7vaCkRk6CPX3smxPKMF1BpObtI:Yv8Fw5TXoBayPvlaLeyC93wMFHAe7nf

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.611.128:39001/ExRM

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 81bc8b24ffaa4cc9d618d77abb241b616033285ff7b8d915e16744247d899dab
    .exe windows:6 windows x86 arch:x86

    d9308d429c92b5549c066113a760cd05


    Headers

    Imports

    Sections