General

  • Target

    76271d70c1ad2de1a926e474d160d34cd22831eb381cb94949f951a480bd63ef

  • Size

    112KB

  • MD5

    d6f5c17d241fad82ee17e4358bb36278

  • SHA1

    5c6f362f14f37777bd2ad0ce8ff71efcfd0f7be0

  • SHA256

    76271d70c1ad2de1a926e474d160d34cd22831eb381cb94949f951a480bd63ef

  • SHA512

    aad52570d915f854d0395e786cbbd32f2c9fd7863fd61c2085f9e4f39d3d29ff617b83bcd53ec80b2ec5c1f5b04733d233ccfdb6d5752ee3e9a406f1f76d6960

  • SSDEEP

    1536:zINkit3NI0zbISZWGwZKacB9vchV6WnIXAsngu9N1h8zMLjVZDLf9sI:0OiFNIqE9LzuUjI

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.102:52192

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76271d70c1ad2de1a926e474d160d34cd22831eb381cb94949f951a480bd63ef
    .exe windows:4 windows x64

    e0e0c99ae34c4b8b156971d78cc79573


    Headers

    Imports

    Sections