Overview

overview

10

Static

static

10

85f69b1bb5...78.exe

windows7-x64

5

85f69b1bb5...78.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    85f69b1bb5e670a1ab804858d3cedfe8cd0de7a22700ced0a652a8462a37c978

  • Size

    54KB

  • MD5

    ab84be18f5876caa554291fd77ac8958

  • SHA1

    6ed56bce34d2422bbe6503b53378e8da477acb35

  • SHA256

    85f69b1bb5e670a1ab804858d3cedfe8cd0de7a22700ced0a652a8462a37c978

  • SHA512

    7bd4d4720633170bc856f14613c40349f913e4287e72864b45124893a0beee95d97ed15e1797a2f309f6d65e0947c63eca7a2c1c326c70d561dc23b11b9a72ea

  • SSDEEP

    768:9qcyGIkugYlIZYmMPRXQf+SFoK7ETpNRJM5c4KC8ug9IYCH0I+kW947f:9jI1gYlAODxKMMO4K4g9vCBj

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.207.128:2129

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 85f69b1bb5e670a1ab804858d3cedfe8cd0de7a22700ced0a652a8462a37c978
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections