Overview

overview

10

Static

static

10

f872ac0006...6a.exe

windows7-x64

10

f872ac0006...6a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f872ac0006217e3b6963f6c2157485ceb89cf5cead06d40ec1130339ac4c476a

  • Size

    72KB

  • MD5

    f38bff786fc5e389408b649a851a2136

  • SHA1

    cd2005a6529207d22878df6047f06322c4cd979e

  • SHA256

    f872ac0006217e3b6963f6c2157485ceb89cf5cead06d40ec1130339ac4c476a

  • SHA512

    af4729aba6dbe43d670f813b25a2e15f7cd84a3d7b730c05d2612a3354bbb1c22410cc0b67d597b3c841532d9dd0974cf011eadeed30f7ee4a39cd3a3e3415bc

  • SSDEEP

    1536:I+HKIyyI0xOqFnomcQ5oT88TMb+KR0Nc8QsJq39:cyqqtlyxTe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f872ac0006217e3b6963f6c2157485ceb89cf5cead06d40ec1130339ac4c476a
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections