Overview

overview

10

Static

static

10

ok.exe

windows10-1703-x64

10

ok.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ok.exe

  • Size

    4.2MB

  • MD5

    ec6581a4caf3c65ead5951ea178774cd

  • SHA1

    af4c5700f8961589056267bec0d84f97175926d0

  • SHA256

    af6116778d24cea89c8c0a4662326440ab685bb2c1bd474311f408079eb3db9b

  • SHA512

    072d1d181ff66cf515a83fc0cfc4aaef0858ac4572c151ae4aea5417622078743e68291f6df0887ba8842398dfaf3d4576552c34b4b9e8dff04f02de364c5871

  • SSDEEP

    49152:oYojsldP7HovyKiULrIQjc5E8uxIdtHmLt3/E2yOy1bmvtF6BfEt:9ltrIiULUbETIzE5Vyh1bmvGfi

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ok.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections