Overview

overview

10

Static

static

10

4ec44b8173...ea.exe

windows7-x64

10

4ec44b8173...ea.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ec44b81737ea5e6246358c832e56b1ed60425284f89345d29dcc5c534f023ea

  • Size

    65KB

  • MD5

    45a7f6bf94496249a8363a2bb603b80d

  • SHA1

    2ad5b61b9c489c4b5c4271fb2ed5b8e50370908e

  • SHA256

    4ec44b81737ea5e6246358c832e56b1ed60425284f89345d29dcc5c534f023ea

  • SHA512

    67ac18fd583af7e3bdb043a45acc63fa4e61f8d54c39df514e16a3ea47f6cb6f5fdec54e8752399cedc825b6e81b073532a655f443e15d33a434c9dfd8d94230

  • SSDEEP

    1536:JEgCyf2YVn613Wicm9fP5IFNWWmv1FN2WbekHV2V:JlP2i61h9pIrKX8V

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.31.140:2221

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ec44b81737ea5e6246358c832e56b1ed60425284f89345d29dcc5c534f023ea
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections