Overview

overview

10

Static

static

10

f4680c5e75...07.exe

windows7-x64

10

f4680c5e75...07.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4680c5e75483afb92c3112117b84b1770603f1afd4702d950bcba18703f9807

  • Size

    72KB

  • MD5

    cadd1588028289428025b9383cc99776

  • SHA1

    9f12a304c249ee509698f8c79e89493d0c1d70c7

  • SHA256

    f4680c5e75483afb92c3112117b84b1770603f1afd4702d950bcba18703f9807

  • SHA512

    0fef6b50a922bf7caa80345bb5c6c973f7d2954bf9966dca0f53c4f35f79125d98e0c9c648193641c53dcb7e99735c3bcab8740d51a3d784cf8ef6f8d0eae4a8

  • SSDEEP

    1536:IlAIxcEoAhhQ/ev3oXsAs9elp+SjTCj16+Mb+KR0Nc8QsJq39:UAy9bQ/mvpkl9ujve0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.50:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f4680c5e75483afb92c3112117b84b1770603f1afd4702d950bcba18703f9807
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections