Overview

overview

10

Static

static

10

1d7bdb6d7a...74.exe

windows7-x64

10

1d7bdb6d7a...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74

  • Size

    945KB

  • MD5

    4d15cf9a32195f50ceaa748fe9aec1f7

  • SHA1

    9dd7d387a8cc244263b7c573b23f7fbef706dedd

  • SHA256

    1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74

  • SHA512

    d1902004d23489ab8b6413db00595a42f09fff3b42f8470c63cae243d65ef59f6c492119d88c6142a9b8651420fb2613b49038a6c57b2978dfe7897687de1cec

  • SSDEEP

    12288:VqX9PxG0OKdVlU6eR8tuzWwZ1Vlra4KN0m7VqDbvZ9XU9flfwt:EX9BOK5U6eR8bwZXlSN0kqDr

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.195.127:4444/OYBr

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d7bdb6d7a2cb1b26bae59daf9d559cc2d62109da60dec2e25ff390a7b13ee74
    .exe windows:4 windows x86 arch:x86

    0d6b2433b9af4c1382ad94472120d6be


    Headers

    Imports

    Sections