General

  • Target

    890786716e9e2dcb6db6381463f2e6a0_exe32.exe

  • Size

    72KB

  • MD5

    890786716e9e2dcb6db6381463f2e6a0

  • SHA1

    8955806723ce62fff0c334719e2cdf448ee5588d

  • SHA256

    54e0109c03ab53d7b3a2aab19bfade66c7603da5cba6f6ca10c541d30ba33e7b

  • SHA512

    0ab8b0105194fb6828d5b0c23f53175268429897b20c79dbb41ecb107e6551280d198c7beec2f11eff8228c8f448e93a3a5c9ec9c96cb65f7000a8f8c4d0fb11

  • SSDEEP

    1536:ILFBb/M/su0t0lYE8mKW9h1CjVxdq6R8yMb+KR0Nc8QsJq39:2xu0tMYEvsVnqWbe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.191:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 890786716e9e2dcb6db6381463f2e6a0_exe32.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections