Overview

overview

10

Static

static

10

Extension.exe

windows7-x64

10

Extension.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Extension.zip

  • Size

    43KB

  • MD5

    7f797ff6b5103adfe5a78cd351adecac

  • SHA1

    af2abfbd502e167cb633d6cff5d1de10099c0fd0

  • SHA256

    ff60d1192ed2528d8aa29cfcd235fbbe74002e0e7048678be47822ff36bc02c5

  • SHA512

    3a64e3ed5912d642fdff17692b8150357863c05ff0343d878870adb680fc93be8210f349fad3fb3ffd789d604ffdd3346177b6d4fb0fe0a5c153dd05206cdfd5

  • SSDEEP

    768:fhF8UEAjGgaRd9Tnxp8zXjvGAkrfdV8tYd9YMtQmhcguqQjydKgfX52Llp63wjgE:fQgj/ab9jxp8zzfk7dSt2thKgKydKgfq

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.115:7700/JxVmIKqquDETqxKqdQESdAttyu5vWAJluglSK4rCFcy7dSsklIMatfCt0AYaTE4t4cwlrwSMZHW0MK2RyvODHcO_aHJ1xfPl9I6WOSWFt6fc0uDMIXvAu36bzTtzmmt6aYXURHsQSxmYBy7yw21ND2D3CSsQ0FuFAYzSGWG_GdvRLdO3VfJafrfsUzocxm8lTHOQcJ

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Extension.zip
    .zip

    Password: infected

  • Extension.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections