General

  • Target

    25ea2b15ea0a7a7559d1996dcc1b0c7dbb221f60a38a18ae8e3a5820df4d17bf

  • Size

    72KB

  • MD5

    c908745618812211a726d92d9f954f89

  • SHA1

    6e0c1a4451ab459e81c03ba326c0a2791600b49d

  • SHA256

    25ea2b15ea0a7a7559d1996dcc1b0c7dbb221f60a38a18ae8e3a5820df4d17bf

  • SHA512

    b1bc88bcc57809c7de6942bff84b801283537eef7f5bb6d0cbc63c296319ae70d9479fcf35b8e2e9459f396f214bff2c11d0a47cd7e0df0f0f3842a671b4af93

  • SSDEEP

    1536:I2wkNBP1japTyg73QJIr85xQLvYrqshtMRH9Mb+KR0Nc8QsJq39:/wkNB1alyKYcLenbMRH9e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

112.74.89.58:45841

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25ea2b15ea0a7a7559d1996dcc1b0c7dbb221f60a38a18ae8e3a5820df4d17bf
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections