Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    72KB

  • MD5

    be9cf1233b2ee932a3f1e4d0731e7903

  • SHA1

    3d004f963cae751f5be3914cd91d1c38f4df7f2a

  • SHA256

    dcfe0636c7f7a34fc02249d3af2d7178580c0038ee355e08ba316c2bb48d5761

  • SHA512

    13689dd7155885bd1e51db2fe844b85bd79986276f1901d057991f37f87195585ec17b26fb47deea699fefb01685a7d24cf93b415d813b0b2dd000322d15c6b2

  • SSDEEP

    1536:Istc5LgDqyYPDYrPXw6jFkhbKolOlMb+KR0Nc8QsJq39:3mLQQPETXVCJKoQe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/mkz1k28a5hVWXldfMKSuWQDmK7fiEd5xuDSo_iL2psuWuGxHGmOnGPc6Ycs357XSfevzTTr7C2_5P

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections