General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    dc49be895bbfcca75f1b1b71aa169b78

  • SHA1

    8a957e583212e930fd89201f0852418d21197e09

  • SHA256

    40541fe4f5020a18e931cd1e175bb02ad78a636a75dbed01ec0cbd7793da58e3

  • SHA512

    2b8e684b2e9c2b7ea9adbeb687d603ec517adaf14ac66e24ef66fb5479c184f80fb15fe622274f6b71aadda7851b7b76042ddc5b20abc208c903f27d0009c41d

  • SSDEEP

    1536:IKXLMenPrfdqtzCcf7aqGMtANTX7hwMb+KR0Nc8QsJq39:zQengtzCcmUCX7hwe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.131:443

Signatures

Files

  • payload.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections