Overview

overview

10

Static

static

10

976dad5eec...06.exe

windows7-x64

5

976dad5eec...06.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    976dad5eece6fa313f0244604d83807fb77021ec9049de26b66105bc5bc4c706

  • Size

    54KB

  • MD5

    be14285506ae49cfb4c8059a4547432b

  • SHA1

    9958f8593dfbaa713daa53097ff7774cf261ceff

  • SHA256

    976dad5eece6fa313f0244604d83807fb77021ec9049de26b66105bc5bc4c706

  • SHA512

    c225c0b13b2dc705356cb8e6ac78d1f994a944563db1495aee38cb6e6aaf10637f21040a7b3e3fbf7815d0787cf5d59dd1175ca8ce330a1b8369f8758dc821cc

  • SSDEEP

    768:E5LDh3MbiDeSWUDVRNunJre9m/Lx+9aJtQO/5HEYuVaW947f:E5LF3+YeUVbRmg6QO/5xj

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.112:1426

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 976dad5eece6fa313f0244604d83807fb77021ec9049de26b66105bc5bc4c706
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections