Overview

overview

10

Static

static

10

3099022637.exe

windows7-x64

10

3099022637.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3099022637.zip

  • Size

    51KB

  • MD5

    36e46b921c54f8d67b4757e1a26ce1ba

  • SHA1

    97c61be077224fb2da9cfb839bf9b653f3c5bd2d

  • SHA256

    57e14b9c6837d2989039a5a69bd90069428cf6f160e9dbc15a26f071cc2e02ee

  • SHA512

    cf768d12043ca4acaa24d232ce65015dc86984351aa33e847035042d6c6873ccfeb73ee6f7d3afc87c2a069959f852f7ed2e1d64575f0c71db5ae5dbd101c2d7

  • SSDEEP

    1536:zBfz518PfdfsatOio48+VV0y7JP5emphf8iwh2x:zpzb83Cat+jnyVhBUt2x

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.16.118.74:40404

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3099022637.zip
    .zip

    Password: infected

  • 3099022637
    .exe windows:4 windows x86 arch:x86

    667823f0660d108593d7a3e820d64787


    Headers

    Imports

    Sections