Overview

overview

10

Static

static

10

28b1bb8332...69.exe

windows7-x64

10

28b1bb8332...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28b1bb833271de5cfd25d4be29140cbac948a70bc08bd7888a77d78fcb171f69.exe

  • Size

    72KB

  • MD5

    17370e97b1b7b408448cbbac8996da9a

  • SHA1

    98b725d5c2ffacd0c9347d990ac948f34649c8e8

  • SHA256

    28b1bb833271de5cfd25d4be29140cbac948a70bc08bd7888a77d78fcb171f69

  • SHA512

    03e31383594dcfa2903779a6d649e3b7d5a4c3bfb87943efab1c205e07fcb383ecb8d9800fee7edfa5aebab06f3c62fda78802237e04803214917e6e41a44555

  • SSDEEP

    1536:Iq3LY5MRs0oiSe/zo5wcqIfFPEMb+KR0Nc8QsJq3f:bgqs0NSe/qkIfFPEe0Nc8QsCf

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

200.200.200.2:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b1bb833271de5cfd25d4be29140cbac948a70bc08bd7888a77d78fcb171f69.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections