Overview

overview

10

Static

static

10

4203d4bc20...bN.exe

windows7-x64

10

4203d4bc20...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4203d4bc20fb8e7f0255cd3463e29cb33eaeec9f340eb700728fd1c91bd2c63bN.exe

  • Size

    72KB

  • MD5

    c574d359bfddd2f9de446e8ed23d6910

  • SHA1

    261f3da09f15f9426ee3cfb95d1047ecf8ea6b7c

  • SHA256

    4203d4bc20fb8e7f0255cd3463e29cb33eaeec9f340eb700728fd1c91bd2c63b

  • SHA512

    81a8726222ca611460bfb457a6998a7f6271e58d8c4b6133dc6ba13490dd6f1e158f58616163303a10b225515b097c8c3c72aa906840d163143ba3c468d83761

  • SSDEEP

    1536:Ix0LcS4WevSUcJ2+sowD0ODrOnMb+KR0Nc8QsJq39:ZLcSkKUsvaoIrOne0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.121.16.228:4545

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4203d4bc20fb8e7f0255cd3463e29cb33eaeec9f340eb700728fd1c91bd2c63bN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections