Overview

overview

10

Static

static

10

testingflr...RV.jar

windows7-x64

1

testingflr...RV.jar

windows10-2004-x64

1

testingflr...02.jar

windows7-x64

1

testingflr...02.jar

windows10-2004-x64

1

testingflr...98.jar

windows7-x64

1

testingflr...98.jar

windows10-2004-x64

1

testingflr....5.jar

windows7-x64

1

testingflr....5.jar

windows10-2004-x64

1

testingflr...lt.jar

windows7-x64

1

testingflr...lt.jar

windows10-2004-x64

1

testingflr...et.exe

windows7-x64

8

testingflr...et.exe

windows10-2004-x64

8

testingflr...r1.exe

windows7-x64

10

testingflr...r1.exe

windows10-2004-x64

10

testingflr...ns.jar

windows7-x64

1

testingflr...ns.jar

windows10-2004-x64

1

testingflr...ter.sh

windows7-x64

3

testingflr...ter.sh

windows10-2004-x64

3

testingflr...ka.exe

windows7-x64

8

testingflr...ka.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5549893a7440486e13fa0b37deacfc52.bin

  • Size

    23.0MB

  • MD5

    bb60720ffd03f527a7c27f270e796a15

  • SHA1

    7f74ba8834aa70ca283acd1a4320e557f3da080d

  • SHA256

    3af83b9fd6d44e79d3cb01decd565cec0fd5db872de3aec1831babd436fcb226

  • SHA512

    08ead531b6a483de7ce789dfb8a2822174fbc1c9c38801a8b66fa81f7eacea801a8d757cee8d2b9040289ae89840c67ef5f137632319b53e0ad15bd463c6821e

  • SSDEEP

    393216:BLy99oxL8dtKI/ACq74Czo7Eie7QRmlosysPNKUCgvjRVJoF8l6bcDAWC:BLypTmCqjzotV6nyGN379oFXyFC

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.204.90.65:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 5549893a7440486e13fa0b37deacfc52.bin
    .zip

    Password: infected

  • 29f26d9f13344df18e82b5007013f241b9e2ea247e2026ded7c93ba4e9c81399.zip
    .zip

    Password: infected

  • testingflrplgpreg-main/DiscordSRV.jar
    .jar
  • testingflrplgpreg-main/LuckPerms-Bukkit-5.4.102.jar
    .jar
  • testingflrplgpreg-main/LuckPerms-Bukkit-5.4.98.jar
    .jar
  • testingflrplgpreg-main/TAB v4.1.5.jar
    .jar
  • testingflrplgpreg-main/Vault.jar
    .jar
  • testingflrplgpreg-main/X4KR7lsy0RQ.jpg
    .jpg

    Password: infected

  • testingflrplgpreg-main/baks-zapret.exe
    .exe windows:4 windows x64 arch:x64

    Password: infected

    7182b1ea6f92adbf459a2c65d8d4dd9e


    Headers

    Imports

    Sections

  • testingflrplgpreg-main/baks.dat
    .gz

    Password: infected

  • baks.dat
  • testingflrplgpreg-main/connector1.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • testingflrplgpreg-main/dill.dat
    .gz

    Password: infected

  • dill.dat
  • testingflrplgpreg-main/kaibutsu-pack.zip
    .zip

    Password: infected

  • assets/minecraft/sounds.json
  • assets/minecraft/sounds/custom/nigger.ogg
  • assets/minecraft/sounds/item/totem/use_totem.ogg
  • assets/minecraft/textures/item/totem_of_undying.png
    .png

    Password: infected

  • assets/minecraft/textures/items/totem.png
    .png
  • pack.mcmeta
  • pack.png
    .png
  • testingflrplgpreg-main/list-baks.txt
  • testingflrplgpreg-main/map_100.dat
    .gz
  • testingflrplgpreg-main/map_553.dat
    .gz
  • testingflrplgpreg-main/map_654.dat
    .gz
  • testingflrplgpreg-main/matrix.png
    .png
  • testingflrplgpreg-main/new1/map_966.dat
    .gz
  • testingflrplgpreg-main/new1/map_967.dat
    .gz
  • testingflrplgpreg-main/new1/map_968.dat
    .gz
  • testingflrplgpreg-main/new1/map_969.dat
    .gz
  • testingflrplgpreg-main/new1/map_970.dat
    .gz
  • testingflrplgpreg-main/new1/map_971.dat
    .gz
  • testingflrplgpreg-main/new1/map_972.dat
    .gz
  • testingflrplgpreg-main/new1/map_973.dat
    .gz
  • testingflrplgpreg-main/new1/map_974.dat
    .gz
  • testingflrplgpreg-main/new1/map_975.dat
    .gz
  • testingflrplgpreg-main/new1/map_976.dat
    .gz
  • testingflrplgpreg-main/new1/map_977.dat
    .gz
  • testingflrplgpreg-main/new1/map_978.dat
    .gz
  • testingflrplgpreg-main/new1/map_979.dat
    .gz
  • testingflrplgpreg-main/new1/map_980.dat
    .gz
  • testingflrplgpreg-main/new1/map_981.dat
    .gz
  • testingflrplgpreg-main/new1/map_999.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_666.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_667.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_668.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_669.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_670.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_671.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_672.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_673.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_674.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_675.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_676.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_677.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_678.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_679.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_680.dat
    .gz
  • testingflrplgpreg-main/new1/new/map_681.dat
    .gz
  • testingflrplgpreg-main/plug/version.txt
  • testingflrplgpreg-main/plug/voidaddons.jar
    .jar
  • testingflrplgpreg-main/sScreamer.jar
    .zip
  • testingflrplgpreg-main/starter.sh
  • testingflrplgpreg-main/whitelist.json
  • testingflrplgpreg-main/zapretka.exe
    .exe windows:4 windows x64 arch:x64

    f326f88ca83c9aacaa44acfb8884f1d4


    Headers

    Imports

    Sections