Overview

overview

10

Static

static

10

166f67f2d5...e0.exe

windows7-x64

10

166f67f2d5...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    166f67f2d542c5adf832690d75960434728f0603f23f0125c8b741d51b9b3be0

  • Size

    23KB

  • MD5

    c41a705c9cdb3f3055f84d23460988ff

  • SHA1

    f760853aaa6ebf9e6c012e4c0139377cc93d6e75

  • SHA256

    166f67f2d542c5adf832690d75960434728f0603f23f0125c8b741d51b9b3be0

  • SHA512

    966c4922bfd1257d94d6937447a99647710029e10440b56e6906afef524a86e12014b18d3a662b7e181cd49d3e3ddfa41b74e649cc02330c901c1c555378af33

  • SSDEEP

    384:xq+ci0Q8ELW2Fb7Rp/o8AEpRPpAvYdsxvBg7gJR:Ci0Qfh7RE+sxvBp

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.196.144:456

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 166f67f2d542c5adf832690d75960434728f0603f23f0125c8b741d51b9b3be0
    .exe windows:4 windows x86 arch:x86

    f4d55ae015b3d8819bdbd22ba99de476


    Headers

    Imports

    Sections