General

  • Target

    msf.exe

  • Size

    72KB

  • MD5

    604beeee6897b6e53c2096c50c31172f

  • SHA1

    922347953eed540384d8bb0922c7e5bb259fc0e1

  • SHA256

    9ea023e6cfd8bc91f229bf524942c1636743d535614a371f81f1c1294539f211

  • SHA512

    a052b4f11a78e5864315a7e66274fa5288413c54c165da1adb32f70cdc1648584e7dd5667d944fa37137144743d1137982bac5c0fc0aee6de42e8524b25097a4

  • SSDEEP

    1536:Im8jTI5OgBcLroGTKqagYVVcpMb+KR0Nc8QsJq39:bQTsOgiroGWqagQepe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://evil.com:4444/FHtwxcI1XbrMic2IqChKmwRG-ztG59zzrN-3QYiI5In4jQhgRZwv4y6itycYr

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • msf.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections