Overview

overview

10

Static

static

10

5fbc08d751...fN.exe

windows7-x64

10

5fbc08d751...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fbc08d751934545979ecf42e5f33ace82ea2b283363c55598ff20fb4f07cfdfN

  • Size

    72KB

  • MD5

    b049e940623a5a1de2c080c5aae2c510

  • SHA1

    03c7d3a5d61f7c03cdd9044ba87e2db34d008918

  • SHA256

    5fbc08d751934545979ecf42e5f33ace82ea2b283363c55598ff20fb4f07cfdf

  • SHA512

    bffab237c30448da81ff4e8cf8b789a108848cae4ba07a800f57c5cc4b1e0cae6e2075bab8f5f94edbee7dfea24a081098b0de31ee1d772ee2bbf771d00be76b

  • SSDEEP

    1536:I77QapEncj0efcAuMxABiqkwCHsUdqmMb+KR0Nc8QsJq39:E7X6n03fcAlxciqkJHsae0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.57.129:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fbc08d751934545979ecf42e5f33ace82ea2b283363c55598ff20fb4f07cfdfN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections