General

  • Target

    shell_JC.exe

  • Size

    72KB

  • MD5

    150ce91bd0473a35baa563d49a9d2046

  • SHA1

    7c9813567de82031f4a60eb665c8373394c38840

  • SHA256

    88f3c3bd8b36ac1c81068df738a85d33179b0432c9d576ca1ae73335fd5b287c

  • SHA512

    eb52b846244c92c3f00884c492843eb4e8b35234507e7a56de9b96c88a42a0b46dc02a1e6cb027ab59192cd74b7bbac6aa068d55f77c5584ce2f69bf264b4ece

  • SSDEEP

    1536:IpvXz3iKauZ87s6mpcVgIwZX1UYCkLm6Mb+KR0Nc8QsJq39:i7Sjh7sLaSFUYCkLPe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.234.67.250:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell_JC.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections