General

  • Target

    totallysafeandnotsusatall_JC.exe

  • Size

    72KB

  • MD5

    42cc87a222b3199c29a783b03f1dac01

  • SHA1

    2feb8673c87166e037d88ea4accc4a9a6b1fb4e2

  • SHA256

    1c28217ab166037081ce9fdedc885d811fb59f30a6dfae7169dc1f2606ff3567

  • SHA512

    609fd6e4caeef77e9a86d422bb154af48f42c225f02edcec5207a30c211b396c082479ab6f913906cba86525bc30e13d44c9447a9207c77c3cc4fff97b153727

  • SSDEEP

    1536:IA7tlHDjWi98qMUYrHipEAsIt2MtFGMb+KR0Nc8QsJq39:/7tl7QUYDqvtTtFGe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

146.190.141.56:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • totallysafeandnotsusatall_JC.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections