General

  • Target

    evilx.exe

  • Size

    72KB

  • MD5

    9999adf0240137e623e3daf04922d152

  • SHA1

    943b679edfe2057c5e2b35e01702ffd0d37140e0

  • SHA256

    c28e002e004c227813779e18a5b2aaffad5b8d89c12df91c7ce66ab7f2616abb

  • SHA512

    bdc5874497c16317f320c2b2a5e4f729492a8bce62babbb4b50c85a449c8ef58c77df97b1e10a8936db1b7263c1bc6e2290c2b736e42e605b6d2d4e0856b42f8

  • SSDEEP

    1536:II0hhjc6rOEjiP5SR+xYWfipJQFnMb+KR0Nc8QsJq39:2rrjGKQfipJQFne0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

45.79.56.153:9999

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • evilx.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections