Overview

overview

10

Static

static

10

c73bbdd655...5c.exe

windows7-x64

5

c73bbdd655...5c.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    c73bbdd6556ab747b8293588d9fcfb05bc26ef2ad5dfcbea782fd792f1a7425c

  • Size

    54KB

  • MD5

    81d746e3c3264f7f193d443b88966dbe

  • SHA1

    52fbac041b8ead326a81339da4c8acfb6e5025b2

  • SHA256

    c73bbdd6556ab747b8293588d9fcfb05bc26ef2ad5dfcbea782fd792f1a7425c

  • SHA512

    9867526c47be3ff29fa41bdbe50df3594b1c90738e51007eb49da7bb2cbb225c85ecf8e0d55f5592dc3bbdc9d5b4792eb5867c1a05974b75bb2624f827245e81

  • SSDEEP

    768:DbIXfuSsGpbU0heihMx6g8O46iQ61daX7e/ym5q2KAyQHviVYivW947f:vKfuidUHihMx6l6T61dzy+cAyovSj

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.196.128:8888

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c73bbdd6556ab747b8293588d9fcfb05bc26ef2ad5dfcbea782fd792f1a7425c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections