General

  • Target

    83e6a1d71f2cec3b8ca59699bcfd390e3d8963997a7bb8813c7635fb28fa7ff0.zip

  • Size

    43KB

  • MD5

    30a69ff6276ffbefbaf3fc10e6b1d867

  • SHA1

    aab7a1eb9ccaed40e8a8adcbcd7851a1b183bec4

  • SHA256

    a7100edfdfcbf81b3f18413c4ce845b1325ad7d762a6377d0924415112535aac

  • SHA512

    b4c99945dfd09b08f093d07928effe7b1b23ef64e49e9360dc0f9f42e3280e26f3a11c750c0849ae658c1d21e50f694f0b938166ad6456d24d2cb1d35a5722b4

  • SSDEEP

    768:TEmTFAoWqRGAfTpCPPrQt/9FZ+7vN5V1kgb00QTU/inIvBWPE+MbD0yuX9jCKjU:TEm+o7jfTpkkFZEFugb03QanU6E+i0yD

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.10.124:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 83e6a1d71f2cec3b8ca59699bcfd390e3d8963997a7bb8813c7635fb28fa7ff0.zip
    .zip

    Password: infected

  • 83e6a1d71f2cec3b8ca59699bcfd390e3d8963997a7bb8813c7635fb28fa7ff0
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections