Overview

overview

10

Static

static

10

2b090a80fd...49.exe

windows7-x64

10

2b090a80fd...49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b090a80fd82bc7d7edcc58a6a1df8691e54bbd53bd27bb033ec67d65a327f49.exe

  • Size

    72KB

  • MD5

    a28e57b9a2986dfef2ad36c7df8f8e3a

  • SHA1

    65ebe99966b4230103ff3ee8d1835ca303942e36

  • SHA256

    2b090a80fd82bc7d7edcc58a6a1df8691e54bbd53bd27bb033ec67d65a327f49

  • SHA512

    eabc4a29b99d9378ba6c9a49cc533890635bc4b1bbc269bc39f9e58e74bd4f28641ada6cf0d354c4518de80025ae30b22c5bfca89e2b888b4106d9933586ced2

  • SSDEEP

    1536:I1Hf4Xx37i81ucz1yGB7ra6p501YIg5SI0Mb+KR0Nc8QsJq39:SwXp7R1ugAor7j0PI0e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.29.129:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b090a80fd82bc7d7edcc58a6a1df8691e54bbd53bd27bb033ec67d65a327f49.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections