Overview

overview

10

Static

static

10

dcc6834598...0N.exe

windows7-x64

10

dcc6834598...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcc68345983309dee6bed52031607910N.exe

  • Size

    65KB

  • MD5

    dcc68345983309dee6bed52031607910

  • SHA1

    314120e98b38509dd31e413af46e4c4f4daed578

  • SHA256

    30efcdb7c2013f1934a67540b3cc5408ce265ac29b424d595d6325696a5eb65e

  • SHA512

    32f279870ad3ccfb0bfb706d9521f265c6bfed1e8f54a1fc6cdf880f25bcf25bd4f0977b199bdcf5ef1ce78ac5e47845f880dbc3f44c526b6ad55549efd47c92

  • SSDEEP

    768:sqq+YUgE0sVQJSqHAXKPxQ6HRnvCKlMHK2kF4kU8/Vvpm3xxTB3lobeEm9U:Xq+YUg5sXqHyCxuKlMHKvUL3xxfobe9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.30.1.31:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcc68345983309dee6bed52031607910N.exe
    .exe windows:5 windows x86 arch:x86

    0e73ec669a8245790d02f257deaa91e9


    Headers

    Imports

    Sections