Overview

overview

10

Static

static

10

7f79605956...d4.exe

windows7-x64

10

7f79605956...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4

  • Size

    85KB

  • MD5

    d95dddfe3f947cab8cf5f3f54e89568a

  • SHA1

    acff9bf9ff5f59824c04771427531b851fe2b862

  • SHA256

    7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4

  • SHA512

    6872165fbcecf93df2b1705d0eca398535ee0c7e00362729833b6ae64ec6852fff80140029ddcb038617a5524af2b03dfe0a6d3ef311c086d695c1cc83b7a9aa

  • SSDEEP

    1536:qKUAl4uglgtS5fpGI1X1O9BKgYqQKBuAhqQzhBl17AsWvDBcdPeaxGQZE/:7HonT1X9qQKEA3lvPeaxGQZE/

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.219:3333

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f796059564389f06b9697bd5904487c3835e011f9fa9f7133e4482f45c426d4
    .exe windows:6 windows x86 arch:x86

    91fc9c198463d815272a849bbb4de005


    Headers

    Imports

    Sections