Overview

overview

10

Static

static

10

payload-c1...bb.exe

windows7-x64

10

payload-c1...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    payload-c17f7df6-cf80-43d5-8c60-eca90366debb.exe

  • Size

    76KB

  • MD5

    81e3a6ecdcf4409ccfa9a5c4367f6021

  • SHA1

    69a81988bde874bbc631173a7f1805310e96dfb5

  • SHA256

    3c7d0dcd37064458fa110cade991501ff6f499d495a8eb43a0847da41d060445

  • SHA512

    2cdee3b9ece8389e02412846a1b7fd2697da5185f985278fd17a240f35c411392d34786677b9ca6b35e860040771a1090a96fb7c9b8bdfd1a44b3ad59d15a78b

  • SSDEEP

    1536:IjTxquYRiKSnmni/Lo4D2xMb+KR0Nc8Qstq3SwVcll:wTxquyamnWee0Nc8Qs2SqYl

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

178.238.231.204:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload-c17f7df6-cf80-43d5-8c60-eca90366debb.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections