General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    d228a69ea27c55d4950bc50153337372

  • SHA1

    d2120fb1fdc444ffe4bad54692c39053300d99f5

  • SHA256

    b3041575ecb8b45f1c544f1a1953ad9fe2c1c88f76bf98571c6eaaab6232c752

  • SHA512

    ac6aac01e6a45e3002908eaa070096c114c6368ebde1bf51f600db28e978b381e1a2283f78ccb2f4dba889834ba253594a917bd5347e10bdb1bde87bfee6ff34

  • SSDEEP

    1536:ImqOd3g58Wgkx7IMbKVmpROgkP/K/OMb+KR0Nc8QsJq39:53uakxsV4Ohde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://103.82.249.29:443/nBEScIZOliHInMmdrcPl-gCSNepBondm5hxjkKyQIC75BYokk-jwTP1fbRrM_c5HWgdjD8FwaX-lS4q-_pziLXyUWzwpzWNW5y7OAboPdiWCIJWnpUyTDJ7wiepfjAQ8M08Xm_RfbL-1dcWOJGdNCgM2nTqPwpbxVu-td6CZ78jgqs5OS9ogwXBHbU6qw1648IRbS3MLXr0PrB1roK-rYSs7D8T

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections