General

  • Target

    c08bc0ff4a8c26dd90dcd4f4f07d115563aa6ec2cca7bd14b52d50e47e81fe6b

  • Size

    37KB

  • MD5

    d0d03d0fb1bbf85320a86aa093a17daf

  • SHA1

    3c7f5bf696befc81fa12bcb8a537c4dbd90789f2

  • SHA256

    c08bc0ff4a8c26dd90dcd4f4f07d115563aa6ec2cca7bd14b52d50e47e81fe6b

  • SHA512

    856ddae3612e491e51f11d598283835b58354d340a5d1231279f77ea8091fd7619cf6f610677b526d8529d43559ff0641f135dcdd53fbda4e6d0afdf1c2c6916

  • SSDEEP

    768:IVKpS2IM2O1CiIx1HI7Ae4cLL1lPMGfcQ6lRZ95x:qF9qdkAvPPMGfUh5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.25:4444

Signatures

Files

  • c08bc0ff4a8c26dd90dcd4f4f07d115563aa6ec2cca7bd14b52d50e47e81fe6b
    .exe windows x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections