Overview

overview

10

Static

static

10

366ec0b59c...2N.exe

windows7-x64

10

366ec0b59c...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    366ec0b59c7620ca36dafbc767df3c953eaff8e718012cb192289b8c75d27662N

  • Size

    72KB

  • MD5

    eddf00860435903c7872ac986d216d40

  • SHA1

    9ad70366366ae24d2b25697a24b1c476a639f8c2

  • SHA256

    366ec0b59c7620ca36dafbc767df3c953eaff8e718012cb192289b8c75d27662

  • SHA512

    361304b5388361e9b7c351082fd70bf4ca0f8feb4ea170c3fc3b522a3599acb216a02020641ce7164eaaae61d67e1abfda42497d01aa59ff3d03d0fae9d66215

  • SSDEEP

    1536:IhK1QgjGGmKH3Eue8vLrsaVhVTtshPMb+KR0Nc8QsJq39:MK1QgQKHUELFtTtshPe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.213.129:8989

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 366ec0b59c7620ca36dafbc767df3c953eaff8e718012cb192289b8c75d27662N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections