Overview

overview

10

Static

static

10

f7d0b5b2fd...f4.exe

windows7-x64

1

f7d0b5b2fd...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7d0b5b2fd73c66509a86f8812d16a7d74edd4f7d72bb09c4adeb0f893c121f4

  • Size

    1.4MB

  • MD5

    eff406a5e49865463979c555ef2dc659

  • SHA1

    787b9677d6a9343a749afc3df649314c63c1ed49

  • SHA256

    f7d0b5b2fd73c66509a86f8812d16a7d74edd4f7d72bb09c4adeb0f893c121f4

  • SHA512

    aea7001af8b8521a6a97bd92b689535b22e065a15cef1694f7b0d3e4e2c389ec96b0bcb0a8efad7998b9f0c34f3bc35c0c14fbf7909d8a88a26fb19aa35c0b62

  • SSDEEP

    24576:KfSiMUaF91h92qkkNvfjsSiiKKvi27hx:O3MUaLD9YnPa7h

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.104:4444/chX9

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; FunWebProducts)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7d0b5b2fd73c66509a86f8812d16a7d74edd4f7d72bb09c4adeb0f893c121f4
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections