Overview

overview

10

Static

static

10

4ba7b01f49...60.exe

windows7-x64

10

4ba7b01f49...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960

  • Size

    22KB

  • MD5

    0858f37f2787baa8855b0a8a352e99a5

  • SHA1

    62eaeff05049c5f8d58520132fc68a5ee0fda6c9

  • SHA256

    4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960

  • SHA512

    b8243e1da9bbc766cb3842cb9e46b0ba59e2726dc7adadfa1d17f3791bba0edff5971f573be3c226c95cae3520125ef1038a08603f55687dcaa5b87ff2bb0eda

  • SSDEEP

    384:ACWGv4O8zvI3qQdJzLJO2Kx8AnQSwwvBsSuzByD2uWI8ot7F:A3GX8zvI3jpFOPZBstzByDNN

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.205:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ba7b01f4945873ea1041ae50fc2ccaee986086b52917c8500641768bbe03960
    .exe windows:6 windows x86 arch:x86

    b276147a484e123495c534ff16aaf771


    Headers

    Imports

    Sections