General

  • Target

    file.exe

  • Size

    72KB

  • MD5

    cef65a67feec2d2e82fdfed909d5aea9

  • SHA1

    1e1fbd7babce10f949e89e9486637846aa1dea92

  • SHA256

    2d6df41572f8a52e5a10925d8c9326edda512166b07b9b2228839cc6f6bca50d

  • SHA512

    1682d3c9c634210ada737a0ff3dcf8aad4eca52f9229a1996e35418edb25e285aeca2700bba00c4c02d51b511a97a780e2fd008acbfa80854d89fecf9a8b9ed4

  • SSDEEP

    1536:IGTqrMvwXBKJlNYrDLiXQQlI6hiG3dZMb+KR0Nc8QsJq39:tqrMMBKd+/iXFte0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

5.188.86.194:18081

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections