Overview

overview

10

Static

static

10

ab.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab.exe

  • Size

    72KB

  • MD5

    306656615fbaaefec706ad27a5971882

  • SHA1

    ba1a86d1d2370ddceaebf5856c3b2d0499a75f4a

  • SHA256

    6b634e803e194a281a077dc2c83feba5160d1f640486861e23596b9fe886c54f

  • SHA512

    05f7ebd463de976dee2674d2cd5e955d1386153cd31efcb7257819dc7e2683b02b76090c4e54d0187b406febb3b60b7b11ca159052b8c5b3d755c18c3d83c33c

  • SSDEEP

    1536:IvbZlls8zTanmGH63yxvNn5kfqZwoMb+KR0Nc8QsJq39:gZllHzTCA453Zwoe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

134.213.29.14:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections