Overview

overview

10

Static

static

10

TripVPN.exe

windows7-x64

10

TripVPN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TripVPN.exe

  • Size

    72KB

  • MD5

    23d17e8f65ace2c3477471fd6d0df530

  • SHA1

    0308d11a47cce4a29ea2cc027d2fb73b41cf1994

  • SHA256

    2f25a7bb2d9c90b6b33ecf157c52d39bd25abb5e74fbc193df00a651723475f8

  • SHA512

    37c5f99cd80900e131d4cc3ffaf813b3b3ded62f6f745c1658e43a70a0cea60865ffacf97287dc2b6f67136417cc75eedbd90fc7b980a5fe975614488489a38a

  • SSDEEP

    1536:Ib3CdIXkNGXtWyRViSmzo/+Pc3UBMb+KR0Nc8QsJq39:kCdI0WwyRUoHkBe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://193.117.208.147:7700/EbzQc8TaK5D10fTQkTfZlw_CSMHT34E_JMSRs31ncX4IMhqJ9rmFK7Kvbdp2Pb_5cDQ9W5PT55FD59AkTD_S2W-U14yqMxtpvlKOZeDCPaVeaniIS5Ayx7K

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TripVPN.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections