General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    2a836aed242c7f0b57b4755d551c726e

  • SHA1

    d1584984f3b75a8d0e4d3b604d8b6e3c5996c19a

  • SHA256

    0a44f7870ed5baf4b6889d26e3aa681bee004cc8dc82e3c76e9698d792633cec

  • SHA512

    912e35299e81ceb5ea078147483f89c6116dc2f445e1819a31da8d1e4c57f6fbad16ed98248bacfcbd11d346bd9c031c053da0f5e1be7bd163678cc0d9af67a1

  • SSDEEP

    1536:IUUAG0J9uOr/aDWr3zt/DxbdMb+KR0Nc8QsJq39:vUAG0J9uODa6r3R7e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

17.253.144.10:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections