General

  • Target

    netwifi_JC.exe

  • Size

    72KB

  • MD5

    7ef93ef88b2e8081947aef47c46a937a

  • SHA1

    e7303d78d754b4c2b20f4e1e219184c32ba12348

  • SHA256

    c8e45ae8340b85a7bb83579bc8d32040aa35701d7a38d296c3d0f7a714036450

  • SHA512

    7b086f73973d460c86ea8d9fc858bddcbfcf1eb80aa6052a8994b9d96304954c126a399ac3d33f9bedd70a1c6cd2e7d333effe7c5017efc391a75a6011d21fad

  • SSDEEP

    1536:IT0K9k8UkfUblxRRJ1Mnhy8EjuHE9xP3EcXIuZGOPbJDtviMb+KR0Nc8QsJq39:j+ko8xr1MhUeE9pg0PPbJxKe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://redhack.uksouth.cloudapp.azure.com:443/L0FCOw4xbchp6mjrDOjOCAS-M_PgImurqEzfMH821IdqJJJ2KY2wJxUA8bNy-mA4f8phP8LFNktEOR0-TLNT_wQgokxKwR5y95z_-kpOTXLrehF03PKRD1g6_bQKXr3zEDG9sNayBhNtZoN1fzKX5K2y7GjgJPZ6M0pBMmdY4YzY1N1-2_-5HGZLcwdrxLNj3CsGq2mXMBquXkaT

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • netwifi_JC.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections