General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    83b8c793e233aed9f9a41d5f42e6883c

  • SHA1

    aff6896449ce37b44386fad41d9d65709bce0b04

  • SHA256

    31e27d123712e87710bd662e9c3cdae1003b501cbee480cd4469cdc342c6285e

  • SHA512

    a006bdc2672e1749883c6885fc0d6becd31699cb341be2efe2cbf49d281bb2e0e452eb920b3d051d8cdfc65246b21eef935c7a570fee74af873e01bb6f10fcb6

  • SSDEEP

    1536:IolW7E62el169kYIzt88VlKYlVOS8Lk8BTMb+KR0Nc8QsJq39:v87ET28stVlKk8Ne0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.15.244:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections