General

  • Target

    system.exe

  • Size

    72KB

  • MD5

    461b1377624cbdcad98fcc009e52e404

  • SHA1

    0a65297a5012318a8f16d7c475dd8e745644cf88

  • SHA256

    e876e50ba664b6300d530498cfd218de6aca95f58a474767fd3658d0288bca97

  • SHA512

    a90bb8f404cb7fb9b4b5fe7457a0b4b4675c69f26cb3bd482e956fe961fa9c473c7f01bfa6a3ee2bfb9310eea8db9f2151085d87fa4bf3e5be4dc0b7d5064825

  • SSDEEP

    1536:IAZPsP02Tgr4v6T+KEYmlDMTbLOMb+KR0Nc8QsJq39:TUP0ZkNMTbLOe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

193.42.32.67:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • system.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections