General

  • Target

    lab3.exe

  • Size

    1.2MB

  • MD5

    d81fa178fd709c56ceda83381afdc976

  • SHA1

    731e57a48af5e9e6ac0dec849a3dc2ac68678c79

  • SHA256

    37ee77b8cd5b859dc41f1f836c45995e62af890aeccb1a3fc13f89d95251cdc8

  • SHA512

    a2f7554a595e02ef6adee80e6d3ffda31c65adfe39aec618999c348f62f868daede5d64983449392af8501bc35a96ea300f04d4010a85d9068e70cd876a375d9

  • SSDEEP

    24576:nUKHPoUwWXcUDLLClqpZ3FUax3dJ3CexE66A8K13D:nUebCKBB3rSexE66V

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.228:4444

Signatures

  • Metasploit family
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs

Files

  • lab3.exe
    .exe windows x86

    cc8d075af0c07c7eca8a095576a55f02


    Headers

    Imports

    Sections