General

  • Target

    b94c28dc0c5424077e1c17feb8c461882dbd0b8a0ad4f60689ab7b054f6b3553

  • Size

    125KB

  • MD5

    971790b1e5509f598fcdf3c41a0caf40

  • SHA1

    3dd2e768290432102ef66093030d4c0843e949c7

  • SHA256

    b94c28dc0c5424077e1c17feb8c461882dbd0b8a0ad4f60689ab7b054f6b3553

  • SHA512

    ae4641227b259ec919b48f79066a4cb863e6ce29f8547958965ca734a3b6c37d55b948be7c6946853fc3e735346e6bab9e1540f02ceab3681f91e4cb8d73681b

  • SSDEEP

    1536:CiVoJcrgnODs4rENzeNLwnAU3zPO39e2Ty0e2iaMzPzaUvMWHnsX9UUUAkbI9dJg:CiV7iODPEYNUGNjyb2ia2yaL0tDdm

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.138.130:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b94c28dc0c5424077e1c17feb8c461882dbd0b8a0ad4f60689ab7b054f6b3553
    .exe windows:4 windows x64

    ca85b6618b1e1cad2f59872f180b38c6


    Headers

    Imports

    Sections