General

  • Target

    shell.exe

  • Size

    72KB

  • MD5

    fa19fa4c2e573e781b9554c1d0b85a40

  • SHA1

    e1bcd1ad982672e16d5f1eec70382469e6d3f673

  • SHA256

    6ea6582483bc51a80a2a0b9a2212cef5eadc4121b5a83ac4b769b652871d9d87

  • SHA512

    67091659586d7354e038c39bbce0e7a566fd3e35551eb7a7b85425aeec9749b0058af2c21d4b3a7ffb1f9dc80136a1b027c019fdcecfd4d9e9be36d583c8f792

  • SSDEEP

    1536:IEA+RerU7LsqDFJgq//1C+M5usFMb+KR0Nc8QsJq39:JVer2Aqbt0Fe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.15.244:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections