Overview

overview

10

Static

static

10

5a6fbea2fc...11.exe

windows7-x64

10

5a6fbea2fc...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a6fbea2fc8b84c907da0a914accbf69a3bbba71ea709da7bc0a9dc4cc730211

  • Size

    54KB

  • MD5

    6ab85bad06ceb670364de0151a8cb931

  • SHA1

    fe111a16450e3fb2d1c2bdf1b6051cc45198f680

  • SHA256

    5a6fbea2fc8b84c907da0a914accbf69a3bbba71ea709da7bc0a9dc4cc730211

  • SHA512

    20975ffd235a0242d2380268c46803787d86e70b577f00d0f6c2389d60958db45a9274f2b020dc1d0ee91324573f02a634c1664f4184bbc159712fd71b6ad848

  • SSDEEP

    768:5pPl34DRSk2PCP0Cr1JKywrDLIAbwd3Ckf9J8YDPb5ACVpPyQKH+PXW947f:5594Sk2PC5BsH+3l73ACVpPjxj

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.3.169:8402

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a6fbea2fc8b84c907da0a914accbf69a3bbba71ea709da7bc0a9dc4cc730211
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections