Overview

overview

10

Static

static

10

478d2f9060...cN.exe

windows7-x64

10

478d2f9060...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    478d2f906048dc6bae90e1d9b0f9f169147149288f8dee073a7f8a0aadeb986cN

  • Size

    343KB

  • MD5

    9dbc3292c279d72a56059fde083b5180

  • SHA1

    c2a0702eeeaa916ca1fd019be58b27c930020b3e

  • SHA256

    478d2f906048dc6bae90e1d9b0f9f169147149288f8dee073a7f8a0aadeb986c

  • SHA512

    ed1ddd9e437f07d14bc7860fe4b16f684bd0d966434cb8a1459b6beb8f47ddad5210f22d594f3aa19552ffac8336bd4ab07493edc65273439aa34c9bef8b2257

  • SSDEEP

    6144:iYayxSIvF68OZGbpYByPT7lyvIco5QiSIvF68OZGbpYByPT7lyvIcgp:iYWIvk8OvByPHly5EiIvk8OvByPHly5M

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.56.100:9999

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 478d2f906048dc6bae90e1d9b0f9f169147149288f8dee073a7f8a0aadeb986cN
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • .data
  • .rdata
  • .rsrc/BITMAP/110.bmp
  • .rsrc/DIALOG/102
  • .rsrc/DIALOG/103
  • .rsrc/DIALOG/104
  • .rsrc/DIALOG/105
  • .rsrc/DIALOG/106
  • .rsrc/DIALOG/107
  • .rsrc/DIALOG/111
  • .rsrc/DIALOG/202
  • .rsrc/DIALOG/203
  • .rsrc/DIALOG/204
  • .rsrc/DIALOG/205
  • .rsrc/DIALOG/206
  • .rsrc/DIALOG/207
  • .rsrc/DIALOG/211
  • .rsrc/DIALOG/302
  • .rsrc/DIALOG/303
  • .rsrc/DIALOG/304
  • .rsrc/DIALOG/305
  • .rsrc/DIALOG/306
  • .rsrc/DIALOG/307
  • .rsrc/DIALOG/311
  • .rsrc/DIALOG/402
  • .rsrc/DIALOG/403
  • .rsrc/DIALOG/404
  • .rsrc/DIALOG/405
  • .rsrc/DIALOG/406
  • .rsrc/DIALOG/407
  • .rsrc/DIALOG/411
  • .rsrc/DIALOG/502
  • .rsrc/DIALOG/503
  • .rsrc/DIALOG/504
  • .rsrc/DIALOG/505
  • .rsrc/DIALOG/506
  • .rsrc/DIALOG/507
  • .rsrc/DIALOG/511
  • .rsrc/DIALOG/602
  • .rsrc/DIALOG/603
  • .rsrc/DIALOG/604
  • .rsrc/DIALOG/605
  • .rsrc/DIALOG/606
  • .rsrc/DIALOG/607
  • .rsrc/DIALOG/611
  • .rsrc/DIALOG/702
  • .rsrc/DIALOG/703
  • .rsrc/DIALOG/704
  • .rsrc/DIALOG/705
  • .rsrc/DIALOG/706
  • .rsrc/DIALOG/707
  • .rsrc/DIALOG/711
  • .rsrc/DIALOG/802
  • .rsrc/DIALOG/803
  • .rsrc/DIALOG/804
  • .rsrc/DIALOG/805
  • .rsrc/DIALOG/806
  • .rsrc/DIALOG/807
  • .rsrc/DIALOG/811
  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/2
    .png
  • .rsrc/ICON/3.ico
  • .rsrc/ICON/4.ico
  • .rsrc/ICON/5.ico
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/version.txt
  • .text
  • .wcyb