Overview

overview

10

Static

static

10

b292867b2a...88.exe

windows7-x64

10

b292867b2a...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b292867b2a9f0205f26bdc7dc09b62de5906cda928b3ad7cfdefcb72702cae88

  • Size

    9KB

  • MD5

    562e039ec377f86353ddff428a88d4ab

  • SHA1

    15f5857f46c081708c4d99078f68d492b2b13bb3

  • SHA256

    b292867b2a9f0205f26bdc7dc09b62de5906cda928b3ad7cfdefcb72702cae88

  • SHA512

    d081ae1b13d9d75fed2191f8b67693adbfe90de175fad700556c455f85da8df92dfb4e3220b6495c695b1754f52458464f532effbdd151847ca9e8c5aaceebcd

  • SSDEEP

    192:26Y0gAhrXOnWJdTjOEV7E5pz6fMAg0Lpf85s:26Y0gOreWJ1j17vgKd85

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.2.146:80/cZWH

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b292867b2a9f0205f26bdc7dc09b62de5906cda928b3ad7cfdefcb72702cae88
    .exe windows:6 windows x86 arch:x86

    60262bcf5ffcfc63cb38936550a9246d


    Headers

    Imports

    Sections