Overview

overview

10

Static

static

10

a22d2b169f...a0.exe

windows7-x64

10

a22d2b169f...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0.exe

  • Size

    72KB

  • MD5

    2a52bd7e2ffbc695c46d747d85c58674

  • SHA1

    85c1bbe98a0650452217a9e2ef521d588c24f1fd

  • SHA256

    a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0

  • SHA512

    1b40f8b50d39070df39596d61dbfd4af9a65c3c1030af2640c6780b2d8444756bd099ff6fd1737b18f758d6e6114259eadab3dab6a77c489409c553b323505fe

  • SSDEEP

    1536:IA+HkP22X85MeGn+mUMRYMb+KR0Nc8QsJq3t:f+y22XaFIYe0Nc8QsCt

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://10.10.10.10:443/DzRl_3k3SpNefF99OS-OeAKQRquAh1JzLNMOilMCPADHmYYq5qIR6HsyIFN8N_Tj4C7sY9jgI9ptjTVeIcd

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a22d2b169ff4f45dc278778642f9e0f20800cf25647aef2f4530c9e5e27903a0.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections