Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    72KB

  • MD5

    873968e78f372ab3a66ffbab310e6a39

  • SHA1

    24bd7920defeed5f5407afd24c6d6e576e5db64f

  • SHA256

    781d0d748c28efa7f9120dd199be4f0587cc02699b340e36ee439957bf6ac61e

  • SHA512

    c7c06425c8b1cd563323dfa0f6e48158d55eb3f5f0e1ebd5f6d5cac6ba629b0a806e024480a2e9ae863f101249dbbf3ca8105ffaf40248bf7a72cd2ee4f0580a

  • SSDEEP

    1536:Imw4oz8ggSfCX4reJtzuMb+KR0Nc8QsJq39:tggyy/zue0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/JRsIfcQhbfLWkdeQsEmgzwK5G11jeHPD5BsHTohTFnFpv53q_LcZ-LpdqZoJcLpBlbkfj3lvc-8-OpkAt2MDQuUaVBw6Df5TQVdzIQDPXc9BX9uZem_Zvrh6qqjSLbzfRxP3H_yzXDbk_Hiwa7kLD4fvcbAaix3ITXkIB2YbB8DjNvt65Mv_Ns-KnPQrODtwWTTM9JcY1ctfdIjMw-x72FSPw8uNpn

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections