General

  • Target

    3ca6f416632956f6aeadcbe363e07d62b3955781570a964ff984f8b107046a06

  • Size

    2.5MB

  • MD5

    ac0e666afade9673a4a9d84e5be890d3

  • SHA1

    282a2c0d1843698ff50f66a9bc247e8a18a66ff2

  • SHA256

    3ca6f416632956f6aeadcbe363e07d62b3955781570a964ff984f8b107046a06

  • SHA512

    ecbc3c230c3036e37a4ce48be84f78ed96164d7a4db2ce9eb970cd5116a6572834c0fd5985f34de47c88d471c018867687b525f8d6a8b54cf2b05bd6ff68bb0f

  • SSDEEP

    49152:dKn83MoXnFv3dcj7q5LsLp3CceMuczXrE83MoXnFv3dcj7q5LsLp3CceMuczah:dKn8HXnl3dcj7q5KpyceMuczXY8HXnlh

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.4:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ca6f416632956f6aeadcbe363e07d62b3955781570a964ff984f8b107046a06
    .exe windows:4 windows x86 arch:x86

    c1e5e771cea27af1a9becb5c3d6f84ba


    Headers

    Imports

    Sections