Overview

overview

10

Static

static

10

aaf0e4c958...f9.exe

windows7-x64

10

aaf0e4c958...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aaf0e4c95885e873653512f8960b638afffd1d75baa7643b5aef0af639eebff9

  • Size

    72KB

  • MD5

    b67fa90f16305df7456b9e9c1cc524e7

  • SHA1

    3ba77e55ce1e78287e7302b88530eb9e7b0d31e0

  • SHA256

    aaf0e4c95885e873653512f8960b638afffd1d75baa7643b5aef0af639eebff9

  • SHA512

    eb87d2c48765c14905fc9a78579b14e9e7c1dca82b46f48cffad4f463813ab431c0347014f84fb4bcf4c2c8c3f4c29e3671e76eb285e1b3f1092b274aee4621d

  • SSDEEP

    1536:IrAFRruPSLO3oeEXiOn+q7MAx2PY3w2aMb+KR0Nc8QsJq39:6AFRqP134iOn+q7Wyw2ae0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.127.251:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aaf0e4c95885e873653512f8960b638afffd1d75baa7643b5aef0af639eebff9
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections