Overview

overview

10

Static

static

10

35785b6f28...c6.exe

windows7-x64

5

35785b6f28...c6.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35785b6f280d4d9bba8d645e13786aff7c7e03668a71f1e599b5a31ca1e664c6

  • Size

    54KB

  • MD5

    e0e19e91724e0f1cb1a5c203c7cc8622

  • SHA1

    42b3e335aee2611c04e5ea2a4bb0b87a30381564

  • SHA256

    35785b6f280d4d9bba8d645e13786aff7c7e03668a71f1e599b5a31ca1e664c6

  • SHA512

    cb37ce12255e7eb35dfc1c746a234350fe9f03d5adc712aaed1885f01e1843d427a2c71deb71d67f3ec580ab5b3093cb393b95eb5362b629dffec3ea0a916c65

  • SSDEEP

    768:wqcyGIkugj/0EUApN2lLnAzD/jissgfVB3W8N9XwgXIYCH0I+kW947f:KjI1gjJ3Pji7SL3WowgXvCBj

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.3.56:1416

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 35785b6f280d4d9bba8d645e13786aff7c7e03668a71f1e599b5a31ca1e664c6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections