Overview

overview

10

Static

static

10

5534024fe8...23.exe

windows7-x64

10

5534024fe8...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b182f5e27d84adb0f7da0d83df2f6b03247aa024a3e97849e30b9d57a4784221

  • Size

    11KB

  • MD5

    82760ee6c6ab042a83f16568c5c574a0

  • SHA1

    622a79518286b9dc8ea4314b3a307182e3cadb4e

  • SHA256

    b182f5e27d84adb0f7da0d83df2f6b03247aa024a3e97849e30b9d57a4784221

  • SHA512

    3a59800e58ba0d9c9ac61893ff3178d891c847d87c3c5efc91e693299f8e5ee561502cc3e689db32c8eb1bdf4b24136057214e21cd988585737b7fa3f3c9c228

  • SSDEEP

    192:NUOxX+q6uPQbJZ6Q+ItZf4gaXusKw/ssxXe1Wz77ZyPn284usxi7JDXLjd4N6V/3:NUORZ6uiJkQ+ItZf4g2h5Veq5yPnL4g5

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.43:5656

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b182f5e27d84adb0f7da0d83df2f6b03247aa024a3e97849e30b9d57a4784221
    .zip

    Password: infected

  • 5534024fe8a47620b94481061acbcc2a2383451b5def69ec571da5ebef7dcc23
    .exe windows:6 windows x86 arch:x86

    10452c0873f18791213599cc6f60b3aa


    Headers

    Imports

    Sections