General

  • Target

    70809eee109fe0f870eb7c1df209472dc40fec84d3697a8ec424bc6ef6db9f5d

  • Size

    92KB

  • MD5

    8ef2c93343eb02176d8531c05845c9bb

  • SHA1

    d3b46e19e144243dbfded982f183b68cb4c502f2

  • SHA256

    70809eee109fe0f870eb7c1df209472dc40fec84d3697a8ec424bc6ef6db9f5d

  • SHA512

    6e8e7a61ff892c11e35c70037e8bc7967ce13fff87f8b49f1684251ffb2ef541ddf347c6032c4afdcc22b5877b7b2bd149fbf063c6d1d7926e653adc49938538

  • SSDEEP

    1536:XArRPGfu9sNXOFR+ol3Sai7zluys17dlhq+TnKsWtkH6Id09dlozY68Ev7xl:XAFPCheFR/i7zluysthxnoqMeYxEzx

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.134.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70809eee109fe0f870eb7c1df209472dc40fec84d3697a8ec424bc6ef6db9f5d
    .exe windows x64

    3dae62f89946deca330c11dbc5ec2e6b


    Headers

    Imports

    Sections