Overview

overview

10

Static

static

10

modsec.exe

windows7-x64

10

modsec.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    modsec.exe

  • Size

    72KB

  • MD5

    3641194bdaea0e2906848ac0c98a5fb9

  • SHA1

    abe1ad74e43593ef5fd6b66f221f19d84fa52a2a

  • SHA256

    1145fba1dfbe5a629a16ffbd84e87736d654e7f559f1901b30cc457d2bc78b6d

  • SHA512

    7291b924faf92ebea97c4fe91cfa4bfc0e77ea3ff97dfe36efece268fe31d85ede29c4dc980913c5f1798863e399021da5cb742db86e40b180ebfef1f82e65cf

  • SSDEEP

    1536:I88BvYUZHvusgUjD8kcduK+bEnh/jzbVMb+KR0Nc8QsJq39:Y9YUVOCgkcx6EhrVe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://172.31.62.147:1994/dDZZvlwzQ-XfGt4bukuBmAekfKKKWA5kb-Vb3Ra_OEjIXWg-RQQestK-KtM3DdMlcgGEqCF9OZ6ZqBFdZDLDmWtsvS9c2J1X31iqoqo4rtEIbgn7ajiAJ3eB

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • modsec.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections