General

  • Target

    b6d22463ea92d6119b509f7855072625.exe

  • Size

    72KB

  • MD5

    b6d22463ea92d6119b509f7855072625

  • SHA1

    edfce2b28e415779e05caac591678a1f6e1b5d55

  • SHA256

    bea44c7dfdb6207426967d631883c5b575c67a4d6d78cedb92094e315b42b5f2

  • SHA512

    e0bd21084f8a004820371a0ac0e6aeea486093d9087ab8563828f32318ab61f20f00f85870f99c9df8ea9622522717fcc62e6e3596c053b98f9f3ad81d012331

  • SSDEEP

    1536:IXs8vQGk6eeCQCRNf8Mb+KR0Nc8QsJq39:osds82e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

51.38.230.212:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6d22463ea92d6119b509f7855072625.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections