General

  • Target

    Malicious_c45591baf3c1b244cd23547d351c86cc359d2d79ad7057db3faf4d65e109b99c.exe

  • Size

    105KB

  • MD5

    8412167863034c076b10690f76819ee8

  • SHA1

    9138eeda39a3660e11e7a8a1b9f1d42a5c1a9fc2

  • SHA256

    c45591baf3c1b244cd23547d351c86cc359d2d79ad7057db3faf4d65e109b99c

  • SHA512

    a4176758bf9d4828625dfc55de5ed6361d2d59e7b4ee2d3c1a71bc4052de41ddd3b0b69622ce9993a5b867c5ad7702b9ba376799d323c9a9471dd823609885b7

  • SSDEEP

    3072:XBETWI9UaFYyZRUQtnUsIHPYD+U546QjD/xpJMM:X2TTUa6sUQtnxOQDl466D/xkM

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Malicious_c45591baf3c1b244cd23547d351c86cc359d2d79ad7057db3faf4d65e109b99c.exe
    .exe windows x64

    127144f1b6d907fc6876d7f850480797


    Headers

    Imports

    Sections