Overview

overview

10

Static

static

10

c38850343c...3N.exe

windows7-x64

10

c38850343c...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c38850343c71b6e467e4a43e788046c135d1facabb3ee8d6ca51a310f56306d3N.exe

  • Size

    72KB

  • MD5

    ec2acde6a6bf6a530f1701925dad6a90

  • SHA1

    0e86f29c58d71965aefea63eef80ff957d713b3d

  • SHA256

    c38850343c71b6e467e4a43e788046c135d1facabb3ee8d6ca51a310f56306d3

  • SHA512

    39d855c7fef6133ca4f665c68902d4d4406020ee6eedc16c8d71346430793fd27c8316fc93d03b7fff3bb4ad85ef1d50c181d236873b4b9f9b67ea687d938760

  • SSDEEP

    1536:IvN9Dv1EutvK6Qa9v2+NoT9Mb+KR0Nc8QsJq39:+zDv11gQuV9e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.115:9093

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c38850343c71b6e467e4a43e788046c135d1facabb3ee8d6ca51a310f56306d3N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections