General

  • Target

    1097226874c0310a98e97b9c8dfce86f4dc459d8faa8cd40ab5039aaaa579739

  • Size

    27KB

  • MD5

    9830307f22a3e2ab770b6af1db29b0ce

  • SHA1

    d9cf190b1b44aa937451731019e90693ed59027a

  • SHA256

    1097226874c0310a98e97b9c8dfce86f4dc459d8faa8cd40ab5039aaaa579739

  • SHA512

    47bf08100b1ad2dad3199508e06f4cde10995452be0ba5488dd39bf9d9174489bfbf16d06a1c152b7ae1f8dcc23c560aa8200a4eb950aba14a69c8795f98969f

  • SSDEEP

    384:AqROzQcKoK48tx8TxeDC83uKDq+V+rwG6loexeWzoUPcoqAG:14zQio9Dqc+D9XW0UqX

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.211.55.12:8877

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1097226874c0310a98e97b9c8dfce86f4dc459d8faa8cd40ab5039aaaa579739
    .dll windows x86

    6a6f76a6cc66b8c8c1dec213f5584706


    Headers

    Imports

    Exports

    Sections