Overview

overview

10

Static

static

10

ab6e24af3a...eN.exe

windows7-x64

10

ab6e24af3a...eN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab6e24af3a46328dc7a1ff0ad6cc8efeb6b45e339941926a27266a4b7b5dc08eN

  • Size

    72KB

  • MD5

    a639a7b31bf21eecf0d1ab22e3ef0e30

  • SHA1

    0c545b28de48e0d3fc80f821dd6eefb028492404

  • SHA256

    ab6e24af3a46328dc7a1ff0ad6cc8efeb6b45e339941926a27266a4b7b5dc08e

  • SHA512

    bae80e51091d3908486cf6843f6a1274f51a639bf18501a01185e86f29d00383fbf47b8e3fed1933a1ddb68376e39940cba909abf2ed4df40657454e4540dea5

  • SSDEEP

    1536:I2bytppiz3+Z/I37K8569/ETEx0eOffrtMb+KR0Nc8QsJq39:pbyLwz3qoK8gezte0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.179:2216

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab6e24af3a46328dc7a1ff0ad6cc8efeb6b45e339941926a27266a4b7b5dc08eN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections