General

  • Target

    window.exe

  • Size

    72KB

  • MD5

    2f82af88dca9081dbd679477913b0e78

  • SHA1

    c031a96df21563a10e1c1c15217535659640285e

  • SHA256

    196626c4ab34aa296ba159c9f2c349a8df73a663a3d7e638e5adfe35bd5114e4

  • SHA512

    d5ccc1ad992052c47f474fd466f0a95c4925a109f3153e82d4f004ea410ec9edbb9510b77e5905171d2c5b67f54ea3a784c486538cd3cabb600514993af92199

  • SSDEEP

    1536:ICqSJRUJDFY9oKr2ZMHUbls8BMb+KR0Nc8QsJq39:fRU/1GKls8Be0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.88.196:5656

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • window.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections