General

  • Target

    testviruse.exe

  • Size

    72KB

  • MD5

    8447e27812e7ba487365a692552b3fec

  • SHA1

    631a25847c353d4e651fbb8cce1bd99ff3d353e0

  • SHA256

    488afe18b27eb19c301b9521bb3984c4ba5ec96aa88c68fe057a74c4e56eb345

  • SHA512

    4ff8fbd05b0432194905819d2e2ae3e26e1e71f235cbbc532b0ee0bfef37ec741c2b763014d2f17aa6a0a2e4a226f0eb41ef926cfe02e4b7e87fc1e69e165f06

  • SSDEEP

    1536:Ir2VKCJQ35p6uDCTJIjAdhhVKIo1NOoNMb+KR0Nc8QsJq39:tV9JWv6HJIE5zo3xe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testviruse.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections