Overview

overview

10

Static

static

10

366fb77501...6N.exe

windows7-x64

10

366fb77501...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    366fb7750197a9ce4450d2f91830007eb17ff68af74e450be8a740793ba1a396N.exe

  • Size

    3.7MB

  • MD5

    7604d0407906197f3a8589675ec07300

  • SHA1

    3edf69330041808d8899d6ce87c82f10650b4d69

  • SHA256

    366fb7750197a9ce4450d2f91830007eb17ff68af74e450be8a740793ba1a396

  • SHA512

    d2b6aa60dcbe0c5c2297c248f8d2b573e22aff3e68b0cfb47c89dd98bf55760ba2a3179f922f8d522f01809e2b97f74acaf1f81b590bbff68bf5cfb268450bd4

  • SSDEEP

    49152:nUUvltf6SGd/FGfIsTE665h0dEY2nU5h0dEY2:UUveSGt4NTEH5xJnU5xJ

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.194:5555

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 366fb7750197a9ce4450d2f91830007eb17ff68af74e450be8a740793ba1a396N.exe
    .exe windows:4 windows x64 arch:x64

    daa01a2e7e70ef8b3ed0f442eacb2f8a


    Headers

    Imports

    Sections