General

  • Target

    75122f1b567370788ed7ab1dcd92fa98d7d88b7f7fb341493fc9990539082fb2

  • Size

    1.0MB

  • MD5

    4f0ea519bb510fe2edce79346bb86123

  • SHA1

    87984fd3ed76d6b9ea827965bfdf36257dbbedaa

  • SHA256

    75122f1b567370788ed7ab1dcd92fa98d7d88b7f7fb341493fc9990539082fb2

  • SHA512

    073e195bfa0459f663649cc1bcc64f5814a8f09facb2491e3abb78891d9808d58998d94961fc75853ad69d65e2e3870e2515453966fdbb66434fa7faefd2d30d

  • SSDEEP

    12288:TJejCb4yEeke0RkfVEahQt3cRzAAcW5czcxRTaoIISba5y:TJejC6efVETt3cRzbcW5c0RuoIISbd

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.138.146:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 75122f1b567370788ed7ab1dcd92fa98d7d88b7f7fb341493fc9990539082fb2
    .exe windows:4 windows x86

    3baf5198a5c82b57436352743d8c8225


    Headers

    Imports

    Sections