Overview

overview

10

Static

static

10

c3312adfd9...85.exe

windows7-x64

10

c3312adfd9...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485

  • Size

    834KB

  • MD5

    6bb619d8bb5db73f63019ecf8fc71392

  • SHA1

    6edec42a9bd43e7c56520211d9afe6e21a29f87a

  • SHA256

    c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485

  • SHA512

    dd6e4f795077cf894c4948aba483c572e268e49802802e3cfc836d98c6b6dc9a91cdca9cba47a369927700d505406ef0cfb90261486dd2be02d7ac9553ffec03

  • SSDEEP

    12288:IBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUseLY+jRY:aiifDk0/AT71Cl7UpsX2UsoJF

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.143:4437

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485
    .exe windows:4 windows x86 arch:x86

    4e2502eead9c4f9bdce714ff55832165


    Headers

    Imports

    Sections