General

  • Target

    service.exe

  • Size

    106KB

  • MD5

    07b4fb169322b75ae6fdfd9b94d48817

  • SHA1

    8c7a3bfe0bc7401807e758009b5edd9f67bd52ac

  • SHA256

    3110244061baedbf8b6334c390da0a3b974292072f29ed391f847ae67c8ac408

  • SHA512

    d0105ba5c4efeec833c8966afc184afdb430e0950bdff928b23d54ae8f98aa4982f75009e0b26c5d86f340dca191a14bb44f9f108e281b2c95463eaee967b5df

  • SSDEEP

    1536:cKTBqtFy6Qvi1W8ISkI/2DvPBAeBPFsst6/HLfg8hFwUCl:eGDvUxFMl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://127.0.0.1:44444/Ug7-SY2nUeRLJEolLmAQrwKxU3Jn37iKtXH2lwMvIcCVfi_baGhnUhghkyLRF9RX3pcOX_F-xlj6MmShe1DXJMm7MNRuORvkQi59eIgwm5YajHHearJHlqHmVn9WxNman461qxZ

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • service.exe
    .exe windows:4 windows x86

    fabca1e687926fb9a4094c95299cc3b4


    Headers

    Imports

    Sections