General

  • Target

    4e5e7384a0107c479f0a7d679035f2626cdd1c2e71b2ac8708fe873877a9ddb4

  • Size

    299KB

  • MD5

    5daa0b29780cbe80103c36f2325b97a9

  • SHA1

    8eab1e27b1c203d80f827f169e074671c03620b8

  • SHA256

    4e5e7384a0107c479f0a7d679035f2626cdd1c2e71b2ac8708fe873877a9ddb4

  • SHA512

    4e5b44a51573cd9fc52c629657fc608e0b0649cadf0967b59263bbc2afa689711a97d14feaa5000ff493c209ad69884f0c5ce815c3879999d6c303c1af18f04d

  • SSDEEP

    6144:VWdipOkSampqaKkcdMH7w7h364spupLxJGKU:VWnmaKk6MH7wt/spupLjGKU

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.175.131:2333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e5e7384a0107c479f0a7d679035f2626cdd1c2e71b2ac8708fe873877a9ddb4
    .exe windows:6 windows x86

    5fa0e083575bf024831fa0756ec44d98


    Headers

    Imports

    Sections