General

  • Target

    01594208c7b631b347581e313b807f451a5a9edd7c42cffe2106af7383e28767

  • Size

    9KB

  • MD5

    5f064e55c23399835320a9ca3896207d

  • SHA1

    bd7ff0ef48f06401ebdc6b50f636a39c26051080

  • SHA256

    01594208c7b631b347581e313b807f451a5a9edd7c42cffe2106af7383e28767

  • SHA512

    750d8bfade218a269c01c6b39dc1483c4caa232ed9fa6465b8f4e1b224be30d602031cc01c4dda209cf6d90e861b26c35d08f3dd67dbe71c116b7bed56b5dc34

  • SSDEEP

    192:kZuUjnUgZWJrzjOWLgdL87E5pz6fM4ucs:kZuQnfcJXjNgC7/u

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

8.130.161.194:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01594208c7b631b347581e313b807f451a5a9edd7c42cffe2106af7383e28767
    .exe windows:6 windows x86

    0fe64c635c0beb1e0b389b476b920ca4


    Headers

    Imports

    Sections