Overview

overview

10

Static

static

10

0e522b3e82...52.exe

windows7-x64

1

0e522b3e82...52.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e522b3e82cea55e748c87b3da52e204cc9e6a11646f7af0e2c5d54a0d2f7652

  • Size

    108KB

  • MD5

    9e2b75b27e2e62364561cc8dc3429a02

  • SHA1

    788c7f7c6977cbd1516739fc291a402014f57e84

  • SHA256

    0e522b3e82cea55e748c87b3da52e204cc9e6a11646f7af0e2c5d54a0d2f7652

  • SHA512

    30b54d7b223edcbbebb9981f7de03c5aa3f61985df05043a76bbeeadc7cb1a0b88be4b2406d87b9276ed2c5bea084f0ce8cdafabc3e5686bafccc6388fb349e7

  • SSDEEP

    3072:ulSSMUzMGik6CxVmQvLz7mx7bJjMQy6sA:sTMUzMG1/myL/+xy6sA

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.205:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e522b3e82cea55e748c87b3da52e204cc9e6a11646f7af0e2c5d54a0d2f7652
    .exe windows:6 windows x64 arch:x64

    5b1c915e28a302e7376cfa730852c668


    Headers

    Imports

    Sections