General

  • Target

    32.exe

  • Size

    72KB

  • MD5

    4a9d72fca527d28ad58c2226e447eb74

  • SHA1

    2a79274a2a06e535e3a3e010aefca07a1ee94a2c

  • SHA256

    175dbd4d4d0c2f2786fb703e54f340e35d5361cfea995acc8d9aa4162ceebdce

  • SHA512

    049ff0d14cec41cf8e0ca5b1673b40639729928ca11f8b5fa76e5abbbb3e76ffacc544be84ca9c14e69e45f8cca703a22a7bfb2a50fcff7d14bc36e9cc33c37f

  • SSDEEP

    1536:I48nkihgU0GZoqykQn/bVykQkk4FuRJMb+KR0Nc8QsJq39:p8nkihgbG4kQ/KEFure0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

107.151.252.121:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections