Overview

overview

10

Static

static

10

722bfc8d82...16.exe

windows7-x64

10

722bfc8d82...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316

  • Size

    61KB

  • MD5

    624abb551df76673771cee3ff32bc003

  • SHA1

    e259f08a467f824c8026f8c31cb1e0b0c58d709c

  • SHA256

    722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316

  • SHA512

    cefba8ce09c136cffb35f8e40efb4bda5060f58a67472c02b2e87f8950e8c4b87448135c0c0d499c9f34c4af78c8739ab1aabfab12ed6d1a51057378e45efa59

  • SSDEEP

    384:xTtTbyweTufayZfPYiIEHKQiR/+xwkrnxPtoG9sdSPJjQfBXZWHSFP/KP89Z0p:xBTbSyN6Y+G9zJ6BpWHSp/KP898

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.154.130:2662/T6hj

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 722bfc8d82815f713ce0080ae4a8e081b8bebdc5ed6dbee99ee3984a32950316
    .exe windows:6 windows x64 arch:x64

    f4eb61a4d922623eae31836ec20a8d69


    Headers

    Imports

    Sections