General

  • Target

    secnhack.exe

  • Size

    72KB

  • MD5

    8f11186e6fdbb15d0299e93fbb730cf0

  • SHA1

    e31bfc22fd3976bda9a3636b7936315de1412a1c

  • SHA256

    c3ce48d7587e0116590d3c965c36e85e3c4d96293c8cf997e162b543baeb7e87

  • SHA512

    a7b4a1581b57ed457f260beb45cae88bb87298bbb3ce92fa1cbfca66bd5bd1da9215c6e3988f686ea4bedcb51bd97a55997f12b782a4a2b507d78d2d19334216

  • SSDEEP

    1536:ITFJA3T5LJDiUuCHwhIOaMF7I76A2JPdWXMb+KR0Nc8QsJq39:+AdViiHz72IT8oe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

209.25.141.180:36930

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • secnhack.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections