General

  • Target

    0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea

  • Size

    1.7MB

  • MD5

    e248655f3697df3fdce96ad5e2af3520

  • SHA1

    193dcd419cb4ac481f29525c854ba8729d87426d

  • SHA256

    0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea

  • SHA512

    dcbec146716196a86168407bbb9b3258daea0d71e517dbb99891f6a47f1af8dc74d1e674c038109f26ffeba576572b2a5cd6dd822dd5e5ac24f19f08705e6ed7

  • SSDEEP

    49152:m0F0p/4ElkxlKPTLJcFKG3uItM9C7hXgtm:5OpAEleKfJcomtM9C7hXJ

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

45.76.96.233:80

Signatures

  • Metasploit family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 0271d754dcca50dbd6fc635b3bc62cff481e413e7f7e3b2d65d8adfe9ba331ea
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections