General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    62a663a6846c262e25f9fd9ecb05d812

  • SHA1

    9007815463d7322358ac93e4243179b3464cf145

  • SHA256

    adf4632c38ef0679683aa336aa0f0d798b39b7af2290c8efa633418505050295

  • SHA512

    6e30fb5c84f0fc3534070484eb1bee5d4eac7dc26dc8bc2ffd5a3bdb77c784200ed8c5aceeec41d5825b82fbde1fb826b271bb5ad53603f6f82bd884c0401a02

  • SSDEEP

    1536:IaF+M7W12h6+jBuXey76AKxJmDyeA8Mb+KR0Nc8QsJq39:N+yW12hgOy76bAW8e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.202.234.105:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections