Overview

overview

10

Static

static

10

a6a058b465...8N.exe

windows7-x64

10

a6a058b465...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6a058b46504dd5483c6c34c959bc0dec8f6bc3a2df176ecab27d1c40f9b7458N

  • Size

    72KB

  • MD5

    9a3eb1318331c0d8c02ced296755ecc0

  • SHA1

    d04ae3a90bb7fa4fc20e5be15f0c9eb841d1fd95

  • SHA256

    a6a058b46504dd5483c6c34c959bc0dec8f6bc3a2df176ecab27d1c40f9b7458

  • SHA512

    8e39c80f40c4814a7754b7e91aad6408d4ed396316319e180a12fcd7c883c8251dce4d30affd8ffc94535e8ea1127f12c000d4a21c6b7fd8397f8a30e6d8f5c3

  • SSDEEP

    1536:Igk5uFW94bnE5vztaI3/HyfHdIIi6Mb+KR0Nc8QsJq39:/PW2bnE5vztaiHyFTi6e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.128:5000

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a6a058b46504dd5483c6c34c959bc0dec8f6bc3a2df176ecab27d1c40f9b7458N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections