General

  • Target

    tro1.exe

  • Size

    72KB

  • MD5

    f1062761150c3671b7f2e4866d8f9de9

  • SHA1

    ffc514239215993350dffb4315e84cf1156ff6fc

  • SHA256

    be8b2f7cc4840600f2d8ffe36ecb5d7a2537a88c50b75649cd29443af3a2fab9

  • SHA512

    fa8a160fb9f38e7c47f23a41edf14141e54345d4e364f64c33065380640b1fb6683f77412ebda2c1e6fa82f4d804cfccb3ba72157c8b080739885a0c9ccaa956

  • SSDEEP

    1536:I/9xO430qY48WCXMR3iTyoTWlJMb+KR0Nc8QsJq39:aDb30q8L82yyWHe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

20.83.148.22:4445

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tro1.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections