Overview

overview

10

Static

static

10

app.exe

windows7-x64

10

app.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    app.exe

  • Size

    72KB

  • MD5

    3ae36161f93d1fd11aca5e8c20e6b222

  • SHA1

    7fd7f234c390aa714193874f510c3ccdd4a3f835

  • SHA256

    381fdc3dce9cead6e67b70105b825ad19b44a9aa3ff18e38f73933988209df1c

  • SHA512

    a8d8bfa9a5ec9400e331a3491f7a11bdfd140d244b202d8f63006aa95e893d4597b4d200ed50db62afb086e209045a74f08aa302c4d58e4c3b71473d751792e5

  • SSDEEP

    1536:ISS5maZI12rHeQN+YC6hLYIvYMb+KR0Nc8QsJq39:HS5mfBu++8oYe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

103.127.132.100:1212

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • app.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections