General

  • Target

    xxxxt.exe

  • Size

    72KB

  • MD5

    9a20a07b9dfafd7e706df812242673b1

  • SHA1

    3cd42111141259dc1a0d7bb57331e2b628c93a4f

  • SHA256

    303d262e8cff41de7adb3755813f5f7502eac7e1b9aaf3f02a6ad51510dd7e8f

  • SHA512

    5c8ae24461a91fa7ccd09b67d078fc7bc2776a1bb75197f65fa6583982ebbcc058ccfd8e43d444896c62602e58a2505fc14a8f3c0b32d4b48515f1b981f4dfd3

  • SSDEEP

    1536:I6QICgzT0gwnfxE5/Z31AbjsPMb+KR0Nc8QsJq39:IIRzg7JE5m4Pe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.170.249.238:4445

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xxxxt.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections