Overview

overview

10

Static

static

10

file.0xfa8...7s.exe

windows7-x64

10

file.0xfa8...7s.exe

windows10-2004-x64

10

Resubmissions

05/08/2024, 19:09

240805-xtzqlsvhlq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.0xfa8031fee8c0.0xfa8031282e60.ImageSectionObject.1cv7s.exe.img

  • Size

    72KB

  • MD5

    2c05c927921767a45e38eae720e98af0

  • SHA1

    b2bcf0a9fae19f5cb5ac8618d46e568b3b517abb

  • SHA256

    51283e9ccb7e9cd2f8a9ec2612948732f8e0b2383cb6787ddf050937442b32d0

  • SHA512

    45159c3631ce312fec4648ed4b29a297ac315c80c9bfcdd3e2cd91df28d16358fbcf7bde4e10eafe20af488a793687f085812f6ece065a2a7324568eeb61822b

  • SSDEEP

    384:IJBNjy64Q2S8it6bMa06rR5wpm6boatAJUHH06zfAdYRcWmU70OCSZukzCScx4qG:ImSftq+npdtPCHSckzCScx4qXfbBq3

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://35.220.198.248:4444/YwZE1KarO8GG2YfY2pkhSATNuowriSTAFtZCnY1prjKrCKeu5JEnRzdMJ_XzPESjXB5flbxjU

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.0xfa8031fee8c0.0xfa8031282e60.ImageSectionObject.1cv7s.exe.img
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections