General

  • Target

    file.exe

  • Size

    72KB

  • MD5

    2939997c9fc9dca6ccf9124200c5bcf7

  • SHA1

    93d1265e21b77bd130b00afaa79c10df305be803

  • SHA256

    69b2c233d4fdb8080ed851c14f8d35bbf2a1d0722b9fcd25881cef408c03cc31

  • SHA512

    53278788eb7e931c83eb62ff9bdf814daf3ab51ffde6072d72131503f6eb806c6780be4ff2544ab772c316a39920c82b1cfe37bba2511186c95408be44e76407

  • SSDEEP

    1536:ICpTCZG9iemtDViYHtOWcKwxJOnrKzGRBJtLyMb+KR0Nc8QsJq39:bp2Ai/s7RJOnrrRftLye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/dDmZLRctSF-O2Y_Y6DNv7gGR1g00Lo-DSbAP10Qhyakl6e3RBIKZx4eGRNsN-6iE5mPtUWD3pQadMjciytVqzPL

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections