General

  • Target

    get.exe

  • Size

    72KB

  • MD5

    35670a3dc3fee40db223bef94a812d0c

  • SHA1

    4a05b227b3f885d58aece394d6bb57e9c9c54e6c

  • SHA256

    b11af9ae860b20fbaf11cc977c0af002501ed7febd86a7a89450a8c98d8e90b3

  • SHA512

    561449897aeda68117b01353db5a22a00a5256ae8f84f5e6dabd87c1ad2c3ff1b2cfcab8b77edc4820abe2ed716d902d28ecf6f3a64444893cc992caeb28d9ad

  • SSDEEP

    1536:ICpG9wYDKoMzP7HSmmJz3KLjmA3Rw3FNnHwpFbVMb+KR0Nc8QsJq39:VpGKE2P+mQTKG1oVe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

217.160.151.115:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • get.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections