General

  • Target

    bind.exe

  • Size

    72KB

  • MD5

    17f8fe85c48e041bbcc72a791a4249f1

  • SHA1

    6af631dfba3ecc761d67391a7fc142b7414a51d0

  • SHA256

    8a99e4d6442675768eea1eb983699700c47fcee9c76b63371fc4513548caae5c

  • SHA512

    28b8e3d775716af5330844cc24b0fcaf902161c64600d0e1a40c665a8580bff5bc64f93a8c8160890113ef2e9addbf49291cf30fca4c748e7b9d3d5c32617e9e

  • SSDEEP

    1536:IyrkgYjFfndelarY7MSXjhWiX5O/l9R2Mb+KR0Nc8QsJq39:7wzF0larYQYNXKl9Qe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bind.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections