General

  • Target

    ss.exe

  • Size

    72KB

  • MD5

    8bbd546498a1a1a01595fb60ad747745

  • SHA1

    ecec5d73d409dd0e9c116ea97eb30e46baac9743

  • SHA256

    fda58a1a6b78442ee71651fb205528580c52755478c6258bee1e1f3037829d00

  • SHA512

    6e3fb99c1842bca3505c7a94f0d5c9da28e25368231e1f8ccdd63a5a78317450ee2185b9bcc5dd2e8463394a828e9411d162e58c88fe64155c05808fee746953

  • SSDEEP

    1536:IZ6w1y84u2Y35wi0vXlMb+KR0Nc8QsJq39:c6cHfye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

62.171.169.170:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ss.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections