General

  • Target

    4433.exe

  • Size

    72KB

  • MD5

    6b0d1765fe3b74f4703f7b1bc66643dc

  • SHA1

    7e3a1f466c36b3aa7e3abd263c60f7f4f0de6461

  • SHA256

    21cbb9166d5d8b6bee3ee751ba2623450c8d9c170a0e35b17367d5aed955c920

  • SHA512

    a11dd10df99856e22e9f8d90057eada90eda1f76845118250977f0e1f09542fcf50030813e01b5f44ebe3cfe4e964d6f472f8aaa2e88e7aaa9b847defed53b7f

  • SSDEEP

    1536:IEyZUobo758Wpp32NEpvEyeZakoFBlTgCMb+KR0Nc8QsJq39:FyZUxdFLZeIk6Ve0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.45.198:4433

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4433.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections