General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    84eebf1ef1e8310d636ded165bfa3a91

  • SHA1

    e267fa5e5da33a1bc2b607dc5a27792f84eef193

  • SHA256

    9c5ac7c3c3fa80423972f46cd6a2c2224ced61ecaa3890cc2174df6dce5ef7ea

  • SHA512

    6eba0411093d3687496bc6dbce91f13aba790bf832403873dc795813e97295012c402135c86129688a95a0239b1951c7d1972bf90b8b832ef9af8b765ca90578

  • SSDEEP

    1536:IJdI8/wKfZuxQVYRIGmvC/NJZMb+KR0Nc8QsJq39:G68/wKfoxQkIGmCNXe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

17.253.144.10:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections