Overview

overview

10

Static

static

10

493e0524d8...71.dll

windows7-x64

1

493e0524d8...71.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    493e0524d8a816eb2ec4e07b037007c0f86544c38618a57f884057c9908e2c71.exe

  • Size

    592KB

  • MD5

    48f1c096e266e0514216c14a8b204c51

  • SHA1

    88edac1a5906ea0f97a626e5406774d05cedfd9d

  • SHA256

    493e0524d8a816eb2ec4e07b037007c0f86544c38618a57f884057c9908e2c71

  • SHA512

    4612f93d1f8f4670c132f827e12166069eaa0693451f770fd073e17bdd85414c0da8b191f611b25f0590fa21b31092411548e5c671de4f847ed81c77aa09b9ad

  • SSDEEP

    6144:CuzVfMjzfsz4dXpg9JWg1d9CiF2X0lFiJJ6+knHnvAQhW6a6aJdt22HvjP3jL3IJ:nBMjDpg5et2uzTL3y

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 493e0524d8a816eb2ec4e07b037007c0f86544c38618a57f884057c9908e2c71.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections