General

  • Target

    exploit1.exe

  • Size

    72KB

  • MD5

    b8abd1a9ca7a17c9279a21a5d4532479

  • SHA1

    a1ba36191b8ac661d749575c76a0a0fc133f39d0

  • SHA256

    ec0cc65cc137cae81fc7adbffce51aa4282fcec474dec1f01b0af189d09d8efb

  • SHA512

    adac17030c40ad154d6396717e87e33b581b71c8d7c2c122ee8e5a28d6b2f7674a57f4bee9885f95db046ad6a276fa5506320a106902f071022ffec2c1e54581

  • SSDEEP

    1536:IezUtYnX/QozjrmyzjXp4raYhV1ur6xh4Mb+KR0Nc8QsJq39:ZU0/TzjrmCXptYhTee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.184.129:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • exploit1.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections