Overview

overview

10

Static

static

10

58edd41d7c...95.exe

windows7-x64

10

58edd41d7c...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95

  • Size

    72KB

  • MD5

    800d0d22dc87f5b7eb76574fa84e4c44

  • SHA1

    26950beeb39c62b1af9d6adc3bd0ab36052aea39

  • SHA256

    58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95

  • SHA512

    26bcd55b4b3b2b20218c38febefd2d44c5c9b390d3a5fbf90559d6b81c5dccfc9a472e8a88c452f764d238bf9d733330475aa435d6bd6090785c129c1df65cc5

  • SSDEEP

    1536:IOjmtN2LxSC4Cx5sgCzffL/uYfIHK8Mb+KR0Nc8QsJq39:AX2gCx+gCzXL/uYAHfe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.241.138:6666

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58edd41d7ce5ce6a341f623025d9e56721495e6a18a286bc55069a32c6056b95
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections