General

  • Target

    secnhack1.exe

  • Size

    72KB

  • MD5

    02520cfd8b3427e0c82495d011904a4a

  • SHA1

    3438be937a87851006a84b74dff02fd98bad5f36

  • SHA256

    b7e841bc43242a3df817a9df64847cc33896cdc9b51b304852b23cc03d961f2d

  • SHA512

    3b86c2b9a67d376ab315cfd25776174bdf2fcb5f95b4b0448fdc2259befba59d0194cae7f106ec6c49b9c0d15d3aa62babb94669845067921bdf75de9e7c1d60

  • SSDEEP

    1536:IjkF5LDAXljLo2t3KlwaqMb+KR0Nc8QsJq39:GkrPOjLoUr7e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

209.25.141.180:36930

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • secnhack1.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections