General

  • Target

    backdoor.exe

  • Size

    72KB

  • MD5

    15f960b2187206dd662a28115e4676cf

  • SHA1

    9f2397bb2293cef91c84009c68f91d0f504faf43

  • SHA256

    792ff86a3ec129ccb0a822383bc9abdec567a02c00ac03b1b2f85b0a4620f7bc

  • SHA512

    73f101169a404679324d09056d6c3adc75656ca7c72746082129bd7cdd741b593bb0e84dc2188a62d0b2fc4626115f6e2a6f94c23fe391f67ee8034ac9903761

  • SSDEEP

    1536:ILCL6i52dyjBALQQfxaf1FMLbel987Mb+KR0Nc8QsJq39:3ALQQpafPMXe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

201.186.136.138:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • backdoor.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections