General

  • Target

    s.exe

  • Size

    72KB

  • MD5

    6e15125ba7ac08c275c1a9e63b3f0507

  • SHA1

    486a4fc27a2817d7d3f9c45e8a920098e220e307

  • SHA256

    d139c2495fc521f215b144bdb35a95cbb50a2adf7e597aba841b6dee3135f07d

  • SHA512

    ba3c1c42745dbc947f528b9b6cde8bd8931bedabfbc8ed7f65a9f925d603e26b629ba7c06d88dc640727dcaab861f28af21c2660dc3c272598c38bfff9537bce

  • SSDEEP

    1536:IJkUeK8fRIyUECpXXT6sPsV6O7NlMb+KR0Nc8QsJq39:hUe3IySdD6snO7Xe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://103.75.197.126:555/cGRSy_LGo1QYvBm9fGEo5QboyqxZqWHGVNOnxfWsHQHfCbgSq-RTjQ642mngBe8EAbJX9VCZPqtXbFnwObAEqOm5_Fzbs1-odo8ZZ7DTZkE8s7Z0rcw-3JU6XpFDTLbu2BXUXYz

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • s.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections