Overview

overview

10

Static

static

10

testp.exe

windows7-x64

10

testp.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    testp.exe

  • Size

    72KB

  • MD5

    2903704dafb2219b7d1ff66bda3098b7

  • SHA1

    d30d0d9f0f4fc27f9e69af1a189b9ff28e1b47b7

  • SHA256

    f8878466a8abbf08f93ff5829c1be851c6eeeb3bef4040abb00b0db8d09910d4

  • SHA512

    3ed46439dfbcb04a8ca265d7b784bb7106e8c2848ce417ceb77c16346eca0693e36fdad065b6f254fad9b3124e6f07c2a82cc195974edc4d1078ce56e722f27f

  • SSDEEP

    1536:IqCZWOu832uyFJrarswiUyKFD21eoxVMb+KR0Nc8QsJq39:tCZVP3dQFarsVKMkove0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.170.249.238:8443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testp.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections