Overview

overview

10

Static

static

10

e1927cf36d...f0.exe

windows7-x64

10

e1927cf36d...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1927cf36d87a89ecda832763a5ae406b260b829380b3a3e97b05af7ef243bf0

  • Size

    74KB

  • MD5

    a5c2f55068bb7be6e6757deee82319d5

  • SHA1

    441bb64abb0b7a20fedaf0a2c2d2923fc42f1452

  • SHA256

    e1927cf36d87a89ecda832763a5ae406b260b829380b3a3e97b05af7ef243bf0

  • SHA512

    7c778ad2ddd146064d0dc3240c3065359112358f92f9a7ca323a23a74763b18b76bcd9858a7af59e47d90e9e298ae53081fe4d9a87f997541473d037e31a639f

  • SSDEEP

    1536:IDzqTCKkxPHd2EuxGxwFMb+KR0Nc8QsJq30Rfq3:WzqTC/VXu6wFe0Nc8QsC0S

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.40:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1927cf36d87a89ecda832763a5ae406b260b829380b3a3e97b05af7ef243bf0
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections