Overview

overview

10

Static

static

10

f988abc236...a3.exe

windows7-x64

10

f988abc236...a3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f988abc236fd9bdb56aeb055dbdddfa9f6710d93cc194b788f76a63653f00fa3

  • Size

    72KB

  • MD5

    c3378a1d780e3bee106cf09b40a5198a

  • SHA1

    fb2b5c5cef67fd42ad066fb81b5b09559a1a77cb

  • SHA256

    f988abc236fd9bdb56aeb055dbdddfa9f6710d93cc194b788f76a63653f00fa3

  • SHA512

    a724d1eb971efd27a92aba27851e3efd7a011ee3d33c8929b9e8ce97c29c7f9ab6c9e74c1fab4caa012d1fe66ac661c5816ef65f8f9b349b4117192336bacc6b

  • SSDEEP

    1536:IdrN+ZvA4Nw1WIppFsT2Y8Oa8kYuDk8rWEMhLn9KMMb+KR0Nc8QsJq39:ErNUXW1WFKY8O73uI8rWHhL9Xe0Nc8Qb

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.5.109:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f988abc236fd9bdb56aeb055dbdddfa9f6710d93cc194b788f76a63653f00fa3
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections