Overview

overview

10

Static

static

10

12ec62921c...0N.exe

windows7-x64

10

12ec62921c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    12ec62921c206490f08035bf7a9389510cf9779211843074ad896edc6244f060N

  • Size

    79KB

  • MD5

    c2bfca03e495e302d0f520fc333ed790

  • SHA1

    2cc9d82f0f919d756f29238335455ac4fddd6865

  • SHA256

    12ec62921c206490f08035bf7a9389510cf9779211843074ad896edc6244f060

  • SHA512

    fc23c66aae8ce1722bc2cae4a73b0e2f90bda9708c000e1c0d51e4efade0d382de9460826e2b77a70340f62eb1f165817fd837981b1b0e7b0a1f961474cb9b8e

  • SSDEEP

    1536:Ii4nzmxoVSDnKGv/nNXpyT7UnRH225BVMvjMb+KR0Nc8QsJq3CxYt4:MaqSDnKGnNXpy0RdT4e0Nc8QsCCu+

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.43.194.251:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12ec62921c206490f08035bf7a9389510cf9779211843074ad896edc6244f060N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections