General

  • Target

    8df1bc14953c9d8010382bad05b400a67dd2e7c7f2dfaf983ddf9023d393bf65

  • Size

    38KB

  • MD5

    89e3a29f785363d72fa2f343d7419805

  • SHA1

    7dd82070663d5e986e2547f3cdda156341f8ae92

  • SHA256

    8df1bc14953c9d8010382bad05b400a67dd2e7c7f2dfaf983ddf9023d393bf65

  • SHA512

    9d542ec4da15316a422a96628f8e4c12e7a069c72ca5af9b17fbbe82011a03352243f519e175c55028244ad889372b81fd36b6da5d9e46b051216c5f3f2c17d8

  • SSDEEP

    384:YOIqydImjzqkO8kxol7YofM54isYpLUCeAyD2lY:Y5mmjzqkO8kxXmYpEAyD

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.10.12:8989

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8df1bc14953c9d8010382bad05b400a67dd2e7c7f2dfaf983ddf9023d393bf65
    .exe windows:6 windows x86

    03fb1de52e0e8c2158f2ff31855cd49c


    Headers

    Imports

    Sections