Overview

overview

10

Static

static

10

6861476e43...0d.exe

windows7-x64

1

6861476e43...0d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6861476e43e0c552cf364148bf3c4b70f819a753f7ea4c5f52af7846505c2b0d

  • Size

    1.7MB

  • MD5

    8179b05c815c3740aa4d39ff271d894e

  • SHA1

    d5ed15ce675bc6e82fa3a7f1a0c5724616ab6a02

  • SHA256

    6861476e43e0c552cf364148bf3c4b70f819a753f7ea4c5f52af7846505c2b0d

  • SHA512

    9714fefb1040ed46a7bc76d5f2727086e2fa119beae1aa03d6669beb11beb7d0a62d78fa87a750f214c14d6ea9d9e5070885f31ce4a35242e47146edf2f2ce21

  • SSDEEP

    24576:Ap3ZJ18zI105UaCNwZfA+u0U7BI285NBiOp56clg3S:YT18zI105xWCWOp574S

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://10.0.0.141:80/ZNBr

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6861476e43e0c552cf364148bf3c4b70f819a753f7ea4c5f52af7846505c2b0d
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections