Overview

overview

10

Static

static

10

Prototype.exe

windows7-x64

10

Prototype.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    79e17050b582c8b73d797c40c80386d78991ebaf04df5a255e39b4fe4d30936f.zip

  • Size

    43KB

  • MD5

    acb46994b4a20c7ba299eac3bbb0065a

  • SHA1

    b6c691f3796857d189336029d1a35fbc2813396c

  • SHA256

    79e17050b582c8b73d797c40c80386d78991ebaf04df5a255e39b4fe4d30936f

  • SHA512

    e2bc3226af8ad4a616e53d1c04edd308f42514fa53e1c71fe96f0d528fec493bff5a61e2685d0234a1d607cd28e1048d56a76aa446442a2c490fc7520d8a41a8

  • SSDEEP

    768:kt25i23db38MO3qBjQH5cVVu0pcU7VVkAT4+6qXFP9SEXS/0PZE3GjkDovGham:ko59V8MO6SCzr7VCAT4UFvCYZknovgam

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.115:7700/T9Jdn2hFEjoEUAVRYuycBA1E2dqYxVnKxknSFo7xORkX71R8PlHF

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79e17050b582c8b73d797c40c80386d78991ebaf04df5a255e39b4fe4d30936f.zip
    .zip

    Password: infected

  • Prototype.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections