Overview

overview

10

Static

static

10

d56bfaf953...c2.exe

windows7-x64

10

d56bfaf953...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2.exe

  • Size

    124KB

  • MD5

    c6bcbc73b09ece2ca1642b59b00a0186

  • SHA1

    7bcd9c5c794918c43721d7b3f3f19da8a824e93a

  • SHA256

    d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2

  • SHA512

    66cd49736cf0348ed23bbcba9e53ff16bcf17de52de091d4b0086fbc5eed1e3d23db0f08d0050a31d4da6c28961c4205c136c5b4eac03060e2bea96d27dc54ee

  • SSDEEP

    1536:IMO1HILNg8XVqhZdGaP+MesUMb+KR0Nc8QsJq3X:OEhpSesUe0Nc8QsCX

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.10.10:3333

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d56bfaf953a048a4fd880b78bf4ba65e828034f34cb05ce8af933a72db192bc2.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections