Overview

overview

10

Static

static

10

771e6e9843...8N.exe

windows7-x64

10

771e6e9843...8N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    771e6e9843cb35a2766c2894d0054c77c6e048a1dec2759ec48ec189382b94c8N

  • Size

    72KB

  • MD5

    25e99874383e309e311b3aaa7daccb20

  • SHA1

    ae5f3411b65ae4b310fc1ea7ab0bd3380f5eabdd

  • SHA256

    771e6e9843cb35a2766c2894d0054c77c6e048a1dec2759ec48ec189382b94c8

  • SHA512

    2fa5b6a958e79ef21362755b12757f5d5650f05ae0da88b9ca84ef380b052bf01baf464a581396a3051ec0d18ed88fbcfd20fb721ec0e0e196ada37c1c7e9a12

  • SSDEEP

    1536:IE14F+RBaoNwiDAxLotT1pnusPhftqMb+KR0Nc8QsJq39:1BgokVWpnuQhFqe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.211.10:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 771e6e9843cb35a2766c2894d0054c77c6e048a1dec2759ec48ec189382b94c8N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections