Resubmissions

25/09/2024, 20:48

240925-zlkb3axbjq 7

23/09/2024, 18:23

240923-w1e44szeng 7

General

  • Target

    EzExploit.7z

  • Size

    30.6MB

  • MD5

    bc79e87d6b727afc86640b227823c881

  • SHA1

    8f6186bfa4ea1c122e900fddd38205d44d6fac08

  • SHA256

    0bd26dba3683857dc7d994f4b41144a4b059fd1840e4f46c5d28efb6b7c96f02

  • SHA512

    62af40e5317d0d3cf2a000dc3fc1eeb14d00b15eff3315934841b5eb79357f30355675d5e5b8211f33b2a8c45efe276e1a7e563624cc0f4c3e0c7e551558aa54

  • SSDEEP

    786432:iqEfv1fVzkQtDIoSIGxiTBdbmGiWLZsYpHSLT9w:iq4BxftDj7BTBwGiWLZr2W

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 4 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • EzExploit.7z
    .7z
  • EzExploit/EzExploit B2.3.rar
    .rar
  • EzExploit B2.3/EzExploit/EzExploit V2.3.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • EzExploit V2.3.pyc
  • EzExploit B2.3/EzExploit/cmd.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • cmd.pyc
  • EzExploit B2.3/EzExploit/config.yml
  • EzExploit B2.3/EzExploit/methods/EzExploitSpoken.jar
    .jar
  • EzExploit B2.3/EzExploit/methods/ProxyBridge.jar
    .zip
  • bungee.yml
  • jutting/BungeeHack.class
  • jutting/commands/ConnectCommand.class
  • jutting/commands/IPCommand.class
  • jutting/commands/InfoCommand.class
  • jutting/commands/NameCommand.class
  • jutting/commands/UUIDCommand.class
  • jutting/listener/LoginListener.class
  • jutting/listener/PreLoginListener.class
  • jutting/listener/ServerConnectListener.class
  • org/json/simple/ItemList.class
  • org/json/simple/JSONArray.class
  • org/json/simple/JSONAware.class
  • org/json/simple/JSONObject.class
  • org/json/simple/JSONStreamAware.class
  • org/json/simple/JSONValue.class
  • org/json/simple/parser/ContainerFactory.class
  • org/json/simple/parser/ContentHandler.class
  • org/json/simple/parser/JSONParser.class
  • org/json/simple/parser/ParseException.class
  • org/json/simple/parser/Yylex.class
  • org/json/simple/parser/Yytoken.class
  • EzExploit B2.3/EzExploit/methods/ezexploit.jar
    .jar
  • EzExploit B2.3/EzExploit/modules.yml
  • EzExploit B2.3/EzExploit/modules/cmd_alert.jar
    .jar
  • EzExploit B2.3/EzExploit/modules/cmd_find.jar
    .jar
  • EzExploit B2.3/EzExploit/modules/cmd_list.jar
    .jar
  • EzExploit B2.3/EzExploit/modules/cmd_send.jar
    .jar
  • EzExploit B2.3/EzExploit/modules/cmd_server.jar
    .jar
  • EzExploit B2.3/EzExploit/modules/reconnect_yaml.jar
    .jar
  • EzExploit B2.3/EzExploit/proxy.log.0
  • EzExploit B2.3/EzExploit/run.bat
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/EzExploit V2.3.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • EzExploit V2.3.pyc
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/cmd.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • cmd.pyc
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/config.yml
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/methods/EzExploitSpoken.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/methods/ProxyBridge.jar
    .zip
  • bungee.yml
  • jutting/BungeeHack.class
  • jutting/commands/ConnectCommand.class
  • jutting/commands/IPCommand.class
  • jutting/commands/InfoCommand.class
  • jutting/commands/NameCommand.class
  • jutting/commands/UUIDCommand.class
  • jutting/listener/LoginListener.class
  • jutting/listener/PreLoginListener.class
  • jutting/listener/ServerConnectListener.class
  • org/json/simple/ItemList.class
  • org/json/simple/JSONArray.class
  • org/json/simple/JSONAware.class
  • org/json/simple/JSONObject.class
  • org/json/simple/JSONStreamAware.class
  • org/json/simple/JSONValue.class
  • org/json/simple/parser/ContainerFactory.class
  • org/json/simple/parser/ContentHandler.class
  • org/json/simple/parser/JSONParser.class
  • org/json/simple/parser/ParseException.class
  • org/json/simple/parser/Yylex.class
  • org/json/simple/parser/Yytoken.class
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/methods/ezexploit.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules.yml
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules/cmd_alert.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules/cmd_find.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules/cmd_list.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules/cmd_send.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules/cmd_server.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/modules/reconnect_yaml.jar
    .jar
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/proxy.log.0
  • EzExploit/EzExploit B2.3/EzExploit B2.3/EzExploit/run.bat
  • EzExploit/EzExploit.rar
    .rar
  • EzExploit/config.yml
  • EzExploit/ezexploit_standard.jar
    .jar
  • EzExploit/launch-standard.bat
  • EzExploit/modules.yml
  • EzExploit/modules/cmd_alert.jar
    .jar
  • EzExploit/modules/cmd_find.jar
    .jar
  • EzExploit/modules/cmd_list.jar
    .jar
  • EzExploit/modules/cmd_send.jar
    .jar
  • EzExploit/modules/cmd_server.jar
    .jar
  • EzExploit/modules/reconnect_yaml.jar
    .jar
  • EzExploit/plugin.yml
  • EzExploit/plugins/RconFix.jar
    .jar
  • EzExploit/plugins/VdsPro.jar
    .zip
  • EzExploit/VirusTotal/EzExploit B2.3.png
    .png
  • EzExploit/VirusTotal/cmd.png
    .png
  • EzExploit/readme.txt