General
-
Target
XpeQ778g.posh
-
Size
6KB
-
MD5
48e3b787f75660793f0a9c0e127fb06e
-
SHA1
47a1bb29f2f0797a2c14407c6439c49ff8090410
-
SHA256
316a1cfba0474b072541a1789a830a95db8dede11da0c5458c18d80cd8b80c17
-
SHA512
e9d1b25ee654fbf45d42a6dc9b1003d97ba3b1e0680dd1cf06128fdba35fe9b86e04a844513d063725d7f41fddd8e916cd04ea59b1161a448cef5f7ebf565545
-
SSDEEP
48:l7KebHqmeP+MThimb7RCL7GiYq5e+IfysXE/58LPUrNfAslLmKmFjm5qDvtfFw/t:JRGTc7l6fpNPUhfXdGf6/QYWwh/p7
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_http
C2
http://0.tcp.sa.ngrok.io:14289/9x9kkJEPI-iF14TW5uJAKws3mbwEq2AkETkwzdmvWgcl6NNoKpQurQmsOH4JLq6pw71oRprqbZG_Jza8pOG_qCg09E7q-i3l-AKXHyEZnH61YxXy4McwjdePWfO6GFkZnlfCwy1I1fkZzqzVvlc75pUK9fm3-ZLzNQNWZA2bYrUSmIPmcyPeR0SlkOyNnByP2wF9I8OvW881aGZCo7Vcuym21-ly69uHRPdkFvxinjDf
Signatures
-
Metasploit family
Files
-
XpeQ778g.posh